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1  Introduction 


In  this  paper  we  give  an  overview  of  KIDS  (Kestrel  Interactive  Development  System)  [Smith  90, 
Smith  91].  We  describe  a  program  derived  with  KIDS  to  solve  the  Missionaries  and  Cannibals 
problem.  The  Missionaries  and  Cannibals  Problem  (mC  PROBLEM)  is  a  classical  AI  planning 
problem.  Our  interest  in  this  problem  arose  as  the  result  of  some  difficulties  that  we  expe¬ 
rienced  when  trying  to  use  the  AI  planners  0-Plan2  and  SlPE-2  to  solve  it  [Gomes  94]. 
We  were  curious  to  see  how  one  could  solve  a  planning  problem  such  as  the  MC  PROBLEM 
using  KIDS.  We  also  wanted  to  evaluate  how  difficult  it  would  be  for  someone  to  formalize 
and  derive  a  program  with  KIDS.  We  derived  a  program  for  the  K-MC  PROBLEM  that  would 
reach  the  solution  for  the  3-MC  PROBLEM  in  108  msecs  (real  time)  and  0  msec  (cpu  time). 
For  the  same  problem,  on  the  same  machine,  SlPE-2  takes  26.19  secs  (real  time)  and  0.15 
secs  (cpu  time).  We  were  able  to  get  the  solution  (or  ‘^no  solution”)^  for  100  problems,  the 
K-MC  PROBLEMS  (  fc  =  1, 2, . . .  100),  in  KIDS  in  225.009  secs  (real  time)  and  11.467  secs  (cpu 
time).  Sipe-2  could  not  solve  problems  for  A:  >  45  in  less  than  20  minutes  real  time. 


2  About  KIDS 

KIDS  is  an  framework  for  the  development  of  programs  from  formal  specifications  [Smith  90, 
Smith  91].  KIDS  provides  tools  for: 

•  deductive  inference 

•  algorithm  design 

•  expression  simplification 

•  finite  differencing 

•  partial  evaluation 

•  other  transformations 

KIDS  is  a  program-transformation  system.  A  user  of  KIDS  develops  a  formal  specification 
into  a  program  by  interactively  applying  a  sequence  of  high-level  transformations.  KIDS 
unique  features  are  the  algorithm  design  tantics  (e.g.,  global  search  or  divide-and-conquer) 
and  its  use  of  a  deductive  inference  component.  All  the  KIDS  transformations  are  correctness 
preserving.  KIDS  runs  on  SUN-4  workstations  and  it  is  built  on  top  of  REFINE,  a  commercial 
knowledge-based  programming  environment  and  a  high-level  language.  REFINE  language 
supports  (a  subset  of)  first-order  logic,  set  theory,  pattern  matching,  and  transformation 
rules.  Refine  has  its  own  compiler  that  generates  CommonLisp  code. 

The  steps  to  follow  in  order  to  build  a  program  in  KIDS  are: 

^There  are  no  solutions  for  k  >  3. 
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•  Develop  a  domain  theory  to  state  and  reason  about  the  problem  -  the  user  defines 
appropriate  types  and  functions  that  describe  the  problem.  The  user  also  provides  laws 
that  allow  high-level  reasoning  about  the  defined  functions  -  in  particular  distributive 
and  monotonicity  laws  provide  most  of  the  laws  that  are  needed  to  support  design  and 
optimization 

•  Apply  a  tactic  -  a  well-structured  but  ineffiicient  algorithm  is  created  -  the  user  selects 
an  algorithm  design  tactic  (method)  from  a  menu  and  applies  it  to  the  specification. 
Existing  tactics  are: 

—  divide-and-conquer 

—  global  search 

*  binary  search 

*  backtrack 

*  branch-and-bound 

•  Simplifications,  partial  evaluation  and  finite  differencing,  and' other  transformations 
are  applied  in  order  to  improve  the  efficiency  of  the  code 

•  Compilation  of  the  code 

KIDS  uses  a  form  of  deductive  inference  called  directed  inference  to  reason  about  the  prob¬ 
lem  specification  in  order  to  optimize  the  code,  apply  tactics,  and  derive  filters  [Smith  82, 
Smith  87].  Directed  inference  allows  the  derivation  of  sufficient  conditions  (antecedents)  as 
well  as  the  derivation  of  necessary  conditions  (consequents).  In  directed  inference  a  source 
formula  (S)  is  transformed  into  a  target  formula  (T)  bearing  a  specified  relationship  (infer¬ 
ence  direction  {rightarrow)  to  the  first  and  given  certain  assumptions  (A).  The  rightarrow 
is  a  reflexive  and  transitive  ordering  relation  between  terms. 

Find  Some  {Target){A  {Source{xi..,Xm)  — >  Target{Yi,  ..,Ym))) 

Directed  inference  performs  first-order  theorem-proving  and  formula  simplification  as  special 
cases.  The  inference  direction  is  one  of  the  following: 

•  forward  inference 

•  backward  inference 

•  simplification  = 

•  derivation  of  a  lower  bound  >= 

•  derivation  of  an  upper  bound  <= 

The  inference  process  involves  applying  a  sequence  of  transformations  to  the  original  form. 
The  transformations  are  restricted  to  those  that  preserve  the  specified  inference  direction. 
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3  Derivation  of  a  Program  for  the  Missionaries  and 
Cannibals  Problem  in  KIDS 

3.1  The  Missionaries  and  Cannibals  Problem 

Three  missionaxies  and  three  cannibals  find  themselves  on  the  left  bank  of  a  river.  The 
missionaries  and  cannibals  want  to  cross  the  river  to  the  other  bank  but  there  is  only  a  two- 
person  boat  to  transport  them.  Missionaries  and  cannibals  agree  to  share  the  boat.  However, 
the  missionaries  do  not  trust  the  cannibals.  They  want  to  devise  a  plan  to  cross  the  river  in 
such  a  way  that  the  number  of  cannibals  on  either  side  of  the  river  never  outnumbers  the 
number  of  missionaries  who  are  on  the  same  side. 

A  generalization  of  the  problem  just  described  considers  k  missionaries  and  k  cannibals  -  we 
refer  to  this  problem  as  the  K-MC  PROBLEM.  When  A;  >  3  the  K-MC  PROBLEM  does  not 
have  a  solution. 


3.2  Domain  Theory  and  Specification  in  KIDS 

When  designing  an  algorithm  to  solve  a  problem,  one  of  the  the  most  difficult  parts  is  the 
conceptualization  of  the  problem  itself.  Furthermore,  the  algorithm  for  solving  a  problem 
depends  highly  on  the  way  the  problem  is  specified.  Before  a  formal  specification  can  be 
written,  the  relevant  concepts,  properties  and  relationships  of  the  problem  must  be  defined 
-  do  not  count  much  on  KIDS  to  formalize  the  domain  theory  for  solving  a  problem.  This  is 
essentially  an  exercise  that  requires  a  full  understanding  of  the  domain  and  a  good  under¬ 
standing  of  how  KIDS  operates. 

A  domain  thcovy  consists  of  a  model  of  the  domain,  expressed  in  some  formal  language  (c.g.j 
functional  language,  first  order  logic),  regarding  inputs,  outputs,  operations,  constraints  and 
objectives.  KIDS  uses  a  functional  specification  programming  language  augmented  with  set- 
theoretic  data  types.  The  main  type  of  constructors  and  their  operations  are  based  on  those 
of  the  REFINE  language.  This  language  supports  (a  subset  of)  first-order  logic,  set  theory, 
pattern  matching,  and  transformation  rules.  Refine  has  its  own  compiler  that  generates 
CommonLisp  code. 

A  domain  theory  in  KIDS  comprises  of: 


•  imported  theories 

•  new  type  definitions 

•  function  specifications 

•  laws  (axioms  and  theorems) 
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•  rules  of  inference 


In  KIDS  a  specification  is  represented  by  a  quadruple  F  =<  D,R,I,0  >,  where  D  is  the 
input  type  subject  to  the  input  condition,  1 1  D  boolean,  that  defines  legal  inputs.  The 
output  type  is  R,  and  the  output  condition,  O  i  D  ^  R  boolean,  defines  the  notion  of 
feasible  solution.  If  0{x,  z),  then  z  is  a  feasible  solution  with  respect  to  input  x.  In  KIDS 
the  specification  of  a  program  follows  the  format  [Smith  87]: 


function  F{x  :  D)  :  set{R) 
where  I{x) 

returns  {z\0{x,z))  =  Bodyix) 

This  problem  specification  for  F  returns  the  set  of  all  the  values  z  of  type  R  that  satisfy  the 
output  condition  O. 

A  specification  for  program  F  is  consistent  if  for  all  possible  input  satisfying  the  input 
condition,  the  body  produces  all  the  feasible  solutions  z  i.e.,  [Smith  87], 

V(z  :  D){I{x)  =>  {z\0{x,z)]). 

Even  though  the  current  implementation  of  KIDS  only  provides  elementary  support  to  the 
design  of  domain  theories  and  specification  of  problems,  there  are  some  handy  features 
in  KIDS  that  alleviate  those  phases  of  program  development.  In  particular,  KIDS  provides 
some  support  for  the  the  derivation  of  distributive  laws  as  well  as  it  facilitates  a  hierarchical 
structure  of  programming  through  the  importation  of  other  theories  into  a  particular  domain 
theory. 


3.3  Domain  Theory  and  Specification  for  the  K-MC  PROBLEM 

In  order  to  encode  the  K-MC  PROBLEM  in  KIDS  we  adopted  the  conventions  displayed  in  table 
1.  Moves  are  represented  by  the  set  {1 . . .  10}.  As  an  example,  the  move  of  one  missionary 
and  one  cannibal  from  the  left  bank  to  the  right  bank  is  represented  by  1.  The  effect  of 
moving  one  missionary  and  one  cannibal  from  the  left  bank  to  the  right  bank  in  terms  of 
the  number  of  cannibals  on  the  left  bank  is  —1  and  in  terms  of  the  number  of  missionaries 
on  the  left  bank  is  also  —1. 

Once  we  have  defined  the  conventions  to  represent  the  different  moves  {1 ...  10},  the  specifi¬ 
cation  of  a  domain  theory  for  the  K-MC  PROBLEM  in  KIDS  consists  of  translating  the  following 
statements  into  KIDS  language: 

Given  k  (missionaries  and  cannibals  and  a  2-person  boat  on  the  left  bank),  find  all  the 
sequences  of  moves  such  that: 
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Type  of  Move 


Type  of  Move 

Convention 

Variation  of  Number  of 
Cannibals  on 

Left  Bank 
(mapcl) 

Variation  of  Number  of 
Missionaries  on 

Left  Bank 
(mapml) 

1  missionary 
and  1  cannibal 
from  left  bank  to 
right  bank 

1 

-1 

-1 

2  missionaries 
from  left  bank  to 
right  bank 

2 

0 

-2 

2  cannibals 
from  left  bank  to 
right  bank 

3 

-2 

0 

1  missionary 
from  left  bank 
to  right  bank 

4 

0 

-1 

1  cannibal 
from  left  bank 
to  right  bank 

5 

-1 

0 

1  missionary 
and  1  cannibal 
from  right  bank  to 
left  bank 

6 

1 

1 

2  missionaries 
from  right  bank  to 
left  bank 

7 

0 

2 

2  cannibals 
from  right  bank 
to  left  bank 

8 

2 

0 

1  missionary 
from  right  bank 
to  left  bank 

9 

0 

1 

1  cannibal 
from  right  bank 
to  left  bank 

10 

1 

0 

Table  1:  The  moves  of  the  missionaries  and  cannibals  problem 
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1  All  the  moves  belong  to  the  set  of  valid  moves  (according  to  our  convention  {1 . . .  10}); 

2  Moves  from  the  left  bank  to  the  right  bank  alternate  with  moves  from  the  right  bank 
to  the  left  bank;^ 

3  No  more  cannibals  (missionaries)  than  the  number  of  cannibals  (missionaries)  on  a 
bank  can  be  moved  from  that  bank  to  the  other  bank; 

4  The  number  of  cannibals  cannot  exceed  the  number  of  missionaries  on  either  bank; 

5  The  same  state  cannot  be  visited  more  than  once;^ 

6  After  the  last  move,  all  the  cannibals,  all  the  missionaxies,  and  the  boat  have  to  be  on 
the  right  bank; 

Note  the  declarative  nature  of  the  statements  that  define  the  problem.  In  other  words,  the 

above  statements  simply  state  what  the  solution  should  follow  in  order  to  be  a  valid  solution. 

We  do  not  state  how  to  actually  generate  the  solution.  That  is  provided  by  the  search  tactic. 

The  translation  of  the  above  statements  into  KIDS  is  the  following  top  level  function: 


function  MC-TQP  (K:  integer  |  K  >=  1) 
returns 

(MC-ALL:  set (seq(integer)) 

I  MC-ALL 

=  {MC  I  (MC:  seq(integer)) 

range(MC)  subset  {1  ..  10}  and  ALTERNATE-MOVE (MC) 
and  POSSIBLE-MOVE 

(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 
and  NO-CANNIBALISM 

(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 
and  NO-MOVES-BACK(VISITED-STATES(MC,  <K,  K,  1>)) 
and  EVERYBODY-MADE-IT(VISITED-STATES(MC,  <K,  K,  1>))}) 


MC-ALL  is  the  set  of  all  solutions  for  the  K-MC  PROBLEM.  Each  solution  MC  is  a  se¬ 
quence  of  integers  within  the  range  {1...10}  and  satisfying  the  constraints  embodied  by 
the  functions:  ALTERNATE-MOVE,  POSSIBLE-MOVE,  NO-CANNIBALISM,  NO-MOVES-BACK, 
AND  EVERYBODY-MADE-IT 

The  function  ALTERNATE-MOVE  guarantees  that  moves  from  the  left  bank  to  the  right  bank 
are  alternated  with  moves  from  the  right  bank  to  the  left  bank.  It  corresponds  to  constraint 
2  of  the  set  of  constraints  stated  above.  It  is  defined  as  follows: 

®Note  that  in  our  conceptualization  we  did  not  represent  the  boat  explicitly.  This  condition,  together 
with  condition  1,  implicitly  considers  the  boat,  guaranteeing  that  the  moves  alternate  from  one  bank  to  the 
other,  starting  on  the  left  bank. 

^Without  this  condition  there  would  be  infinite  solutions. 
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function  ALTERNATE-MOVE  (MC:  seq(integer)) :  boolean 
=  fa  (I:  integer) 

(I  in  [1  . .  size(MC)] 

=>  (I  mod  2  "=  0  and  MC(I)  <  6) 

or  (I  mod  2  =  0  and  MC(I)  >  5)) 


Basically,  it  states  that  the  even  positions  of  the  sequence  have  to  be  less  than  6  and  the  odd 
positions  of  the  sequence  have  to  be  greater  than  5.  Notice  that  according  to  our  convention 
moves  from  the  left  bank  to  the  right  bank  correspond  to  the  range  {1 ...  5},  while  moves 
from  the  right  bank  to  the  left  bank  correspond  to  the  range  {6 . . .  10}. 

In  order  to  implement  the  other  constraints,  we  defined  the  function  VISITED-STATES  that 
returns  the  sequence  of  states  the  system  goes  through.  The  state  is  defined  by  the  tuple 
<  clb,  mlb,  boat  >,  where  clb  is  the  number  of  cannibals  on  the  left  bank,  mlb  is  the  number 
of  missionaries  on  the  left  bank,  and  boat  is  the  bank  where  the  boat  is.®  Notice  that  since 
we  know  that  we  have  k  missionaries  and  k  cannibals,  we  know  the  number  of  missionaries  on 
the  right  bank,  mrb  =  k  —  mlb,  and  the  number  of  cannibals  on  the  right  bank,  crb  =  k  —  clb. 

The  function  POSSIBLE-MOVE  corresponds  to  constraint  3  of  the  set  of  constraints  listed 
above.  It  specifies  that  at  each  state  the  system  goes  through  clb  <  0,crb  <  0,mlb  < 
0,  mrb  <  0.  The  function  POSSIBLE-MOVE  is  defined  as  follows: 


function  POSSIBLE-MOVE 

(S:  seq(tuple(integer,  integer,  integer)),  K) :  boolean 
=  fa  (I: integer) 

(I  in  domain(S) 

=>  STATE(I).l  >=  0  and  STATE(I).2  >=  0 

and  K  -  STATE(I).l  >=  0  and  (K  -  STATE(I).2)  >=  0) 


The  function  NO-CANNIBALISM  guarantees  that  cannibals  never  outnumber  missionaries,  on 
either  bank  (constraint  4).  It  is  defined  as  follows: 


function  NO-CANNIBALISM 

(S:  seq(tuple(integer,  integer,  integer)),  K:  integer) 

:  booleein 
=  f a  (I : integer) 

(I  in  domain(S) 

^According  to  our  convention,  1  corresponds  to  the  left  batnk  and  -1  to  the  right  bank. 
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=>  (STATE(I).2  =  0  or  STATE(I).2  >*  STATE(I).l) 
and  (K  -  STATE (I). 2  =  0 

or  K  -  STATE(I).2  >=  K  -  STATE(I).l)) 


The  function  NO-MOVES-BACK  guarantees  that  the  same  state  is  not  re-visited  (constraint 
5),  and  it  is  defined  as  follows: 

function  NO-MOVES-BACK 

(VIS-STATES:  seq(tuple(integer,  integer,  integer))):  boolean 
=  fa  (I:  integer,  J:  integer) 

(I  in  [1  ..  size (VIS-STATES)] 

and  J  in  [l  . .  size (VIS-STATES)]  amd  I  =  J 
=>  VIS-STATES (I)  "=  VIS-STATES (J)) 


Finally,  the  function  EVERYBODY-MADE-IT  guarantees  that  after  the  last  move,  all  the  can¬ 
nibals,  missionaries,  and  the  boat  have  to  be  on  the  right  bank,  which  is  equivalent  to  saying 
that  the  number  of  cannibals  on  the  left  bank  is  0,  the  number  of  missionaries  on  the  left 
bank  is  0  and  the  boat  is  on  the  right  bank. 


function  EVERYBODY-MADE-IT 

(VIS-STATES:  seq(tuple(integer,  integer,  integer))):  boolean 
=  (last (VIS-STATES)  =  <0,  0,  -1>) 

3.3.1  Distributive  Laws 

Laws  are  assertions  that  define  axioms  or  theorems,  i.e.,  statements  that  are  always  true.®  In 
KIDS  distributive  and  monotonic  laws  are  commonly  used.  The  idea  is  to  provide  information 
on  alternative  ways  of  defining  predicates,  exactly  in  the  same  way  one  would  write  a  law 
about  how  to  distribute  multiplication  over  addition.  Additionally,  laws  also  specify  special 
cases,  for  instance  when  dealing  with  base  cases  (e.g.,  empty  sequences). 

KIDS  provides  some  rudimentary  support  for  the  the  derivation  of  distributive  laws.  However, 
in  general  the  laws  derived  automatically  by  KIDS  axe  very  poor  and  not  simple  enough  for  the 
directed  inference  mechanism  to  be  able  to  use  them.  For  instance,  using  the  laws  derived 
automatically  by  KIDS  for  the  MC-PROBLEM  the  directed  inference  mechanism  could  not 
derive  any  filter  (see  section  3.4.1).  A  useful  heuristic  in  writing  laws  about  the  domain  is  that 
they  should  be  simple,  normally  expressed  in  terms  of  the  main  function  and  perhaps  another 

®The  difference  between  an  assertion  and  a  function  is  the  following.  A  function  always  returns  a  value. 
An  assertion  is  simply  a  true  statement  -  e.g.,  {A  +  B)  *C  =  {A*C)  + {B  *  C),  or  (  A  and  B  A) 
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function  to  handle  cross-products.  The  distributive  laws  for  the  function  ALTERNATE-MOVE 
are  listed  below.  Notice  the  cross  function,  SHIFT-ALTERNATE-MOVE,  defined  as  follows: 


function  SHIFT- ALTERNATE-MOVE 

(S:  seq(integer) ,  OFFSET:  integer):  boolean 
=  fa  (I:  integer) 

(I  in  domain(S) 

=>  (I  +  OFFSET)  mod  2  “=  0  and  S(I)  <6 

or  (I  +  OFFSET)  mod  2  =  0  and  S(I)  >  5) 


assert  DISTRIBUTE-ALTERNATE-MOVE-OVER-EMPTY-SEQ 
fa  0  ALTERNATE-MOVE([])  =  true 


assert  DISTRIBUTE-ALTERNATE-MOVE-OVER-SEQUENCE-CONCATENATE 
fa  (SI,  S2) 

ALTERNATE-MOVE (SI  ++  S2) 

=  (ALTERNATE-MOVE(Sl)  and  SHIFT-ALTERNATE-M0VE(S2,  size (Si))) 


assert 

DISTRIBUTE-ALTERNATE-MOVE-OVER-PREPEND-ELEMENT-TO-SEQUENCE 
fa  (A,  S) 

ALTERNATE-MOVE(prepend(S,  A)) 

=  (ALTERNATE-MOVE ([A])  and  SHIFT-ALTERNATE-MOVE (S,  1)) 


assert 

DISTRIBUTE-ALTERNATE-MOVE-OVER-APPEND-ELEMENT-TO-SEQUENCE 
fa  (A,  S) 

ALTERNATE-MOVE(append (S ,  A) ) 

=  (ALTERNATE-MOVE (S)  and  SHIFT-ALTERNATE-MOVE( [A] ,  size(S))) 


The  complete  domain  theory  for  the  MC  PROBLEM  is  listed  in  the  appendix  (section  6.1) 


3.4  Algorithm  Design  in  KIDS 

After  defining  a  domain  theory,  the  next  step  is  to  develop  a  high-level  algorithm  for  enu¬ 
merating  solutions.  The  search  tactic  that  we  used  for  the  MC-PROBLEM  was  global  search 
[Smith  87]. 

This  tactic  designs  a  backtrack  algorithm,  a  refinement  of  generate-and-test.  The  tactic 
is  implemented  by  finding  a  space  containing  all  the  solutions  to  the  problem  that  can  be 


12 


divided  into  nested  subspaces.  The  global  search  algorithm  starts  with  an  initial  set  that 
contains  all  the  solutions  to  the  given  problem  instance,  the  algorithm  repeatedly  extracts 
solutions,  splits  sets,  and  eliminates  sets  using  filters  until  no  sets  remain  to  be  split.  The 
process  can  be  described  as  a  tree  search  in  which  a  node  represents  a  set  of  candidates,  and 
an  axe  represents  the  split  relationship  between  a  set  and  a  subset.  The  principal  operations 
are  to  extract  candidate  solutions  from  a  set  and  to  split  a  set  into  subsets.  In  this  model  of 
global  search,  solutions  can  be  extracted  from  all  nodes  of  the  tree,  not  just  the  leaves.  The 
derivation  of  efficient  filters  that  prune  subspaces  that  do  not  contain  any  feasible  solution 
is  a  complementary  operation  in  the  derivation  of  the  global  search  tactic.  The  pruning 
mechanism  is  derived  by  forward  inference  from  the  feasibility  condition. 

In  order  to  use  global  search  as  the  search  paradigm  for  a  given  specification,  the  problem 
specification  represented  by  a  quadruple  F  =<  D,  R,I,0  >  is  extended  with  the  abstract 
data  type  that  represents  sets  of  solutions,  R.  Formally,  a  global  search  theory  (  gs— theory) 
is  presented  as  follows  [Smith  87]: 

Sorts 

D  input  domain 

R  output  domain 

A 

R  subspace  descriptors 

Operations 

I :  D  —*  boolean 
O  :  D  X  R~*  boolean 

A  A 

I :  D  X  R  boolean 
fo‘D—yR 

Satisfies  :  R  x  R  boolean 

A  A 

Split  :  D  X  R  X  R  boolean 
Extract  :  R  x  R  —*  boolean 

Axioms 

GSO.  /(x)  =>  /(r,ro(i)) 

GSl.  I{x)  A  i{x,f)  A  Split{x,f,s)  i{x,s) 

GS2.  I{x)  A  0{x,z)  Satisfies{z,fo{x^)) 

GS3.  I{x)  A  I{x,f)  =>  {Satisfies{z,f)  <=>■  3{s)  {  Split* {x,f,s)  A  Extract {z,s))) 


input  condition 
input/output  condition 
subspace  descriptors  condition 
initial  space 

denotation  of  descriptors 
split  relation 

extractor  of  solutions  from  spaces 


The  sorts  and  operators  that  extend  the  problem  specification  in  the  GS-theory  are  denoted 
with  hats:  R  is  the  space  descriptor  that  represents  sets  of  solutions  (elements  of  R  are 
denoted  in  lowercase);  /  is  an  operator  on  R  that  defines  legal  sets  of  solutions;  Satisfies{z,  f) 
means  that  the  solution  z  is  in  the  set  denoted  by  descriptor  r;  Split{x,  r,  s)  means  that  s  is  a 
subspace  of  r  with  respect  to  input  x;  and  Extract{z,  f)  means  that  z  is  directly  extractable 
from  r.  Axiom  GSO  states  that  the  initial  descriptor  ro(x)  is  a  legal  descriptor.  Axiom  GSl 
states  that  legal  space  descriptors  split  into  legal  descriptors.  Axiom  GS2  states  that  all 
feasible  solutions  are  contained  in  the  initial  space  descriptor,  fo .  Axiom  GS3  states  that  an 


13 


output  object  z  is  in  the  set  denoted  by  r  if  and  only  if  z  can  be  extracted  after  applying 
Sylit  to  f  a  finite  number  of  times,  which  is  denoted  by  the  *. 

A  gs-theory  can  be  represented  as  a  tuple 


Q  =  (iB,  /,  fo,  Satisfies,  Split,  Extract) 

where  B  =  {D,  R,  I,  O). 

For  more  details  about  gs-theory  and  its  well-foundedness  see  [Smith  87]. 
An  example  of  a  global  search  theory  follows: 


F 

D 

I 

R 

0 

A 

R 

A 

I 

Satisfies 

A 

ro 

Split 

Extract 


gs  —  sequences  —  over  —  finite  —  set 
set{a) 

X{S)  true 
seq{a) 

\{S,  q)  range{q)  C  S 
seq(a) 

X{S,  V)  range{V)  C  S 
X{q,  V)  extends(q,  V) 

A(5,  V,  V)  3(0(*  €  5  =4^  r  =  append{V,i)) 
X{q,V)q  =  V 


This  global  search  theory  enumerates  sequences  over  a  finite  set  of  generic  type  a,  S  -  the 
output  condition  imposes  that  the  output  sequences  q  are  subsets  of  S.  V  is  the  subspace 
descriptor  -  the  initial  subspace  descriptor  is  the  [  ]  and  legal  space  descriptors  are  subsets 
of  S.  Splitting  corresponds  to  appending  an  element  from  S  into  V .  The  output  sequence 
can  be  extracted  from  the  subsapce  whose  descriptor  is  V . 


The  following  theorem  defines  a  recursive  program  specification  to  implement  an  abstract 
global  search  theory. 


Theorem  3.1  IfQr  is  a  well-founded  gs-theory  then  the  following  multilinear  recursive  pro¬ 
gram  specification  is  consistent. 


function  F{x  :  D) :  set{R) 
where  I{x) 
returns  {z  \  0{x,z)} 

=  F-gs\x,fo{x)) 

function  F-gs{x  :  D,f  :  R) :  set{R) 
where  I(x)  A  /(x,  r) 
returns  {z  I  5ah's^es(5r,  r)  A  0(x,z)} 

=  {z  I  Extract(z,  f)  A  0{x,  z)} 

U  reduce(U,  {  F-gs{x,s)  \  Split{x,f,s)}). 
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The  proof  of  the  theorem  can  be  found  in  [Smith  87]. 

Once  we  have  a  program  for  a  given  global  search  theory,  it  is  important  to  define  how  we 
can  use  that  program  for  a  given  problem  specification.  The  following  theorem  defines  how 
to  construct  a  global  search  program  for  a  general  problem  Bp  =  {Dp,  Rp,  Ip,  Op)  from  a 
given  global  search  theory,  Bq  =  {Da,  Rg,  Ig,  Oq),  and  assuming  that  there  is  a  translation 
t{x)  that  specializes  Bp  to  Bq,  i-e.: 

Definition.  Bp  specializes  Bg  if  Rp  =  Rg  and 


Wix  :  Dp)3{y  :  DG)y(z  :  Rp)iilp{x)  IpG{y))  A  {Op{x,z)  OG(y,z))).  (1) 

Definition.  Bp  specializes  to  Bg  with  translation  t{x)  if 

y(x  :  Dp)W{z  :  Rp){(Ip{x)  IpG(t(x)))  A  {Op{x,z)  =>■  OG(f(a:),  ^))). 

Theorem  3.2  LetQG  =  {Bg,  R,  I ,  roi^zitisfies.  Split,  Extract)  be  a  global  search  theory,  and 
let  Bp  =  {Dp,  Rp,  Ip,  Op)  be  a  problem  theory  that  specializes  Bg  =  {Dg,  Rg,  Ig,  Og)  with 
translation  t{x),  then  the  structure  Qp  =  {Bp,R,\{x,f)I{t{x),f),Sa.tis^es,X{x)fo{t{x)), 
A(x,  f,  s)  Split{t{x),  f,  s).  Extract)  is  a  global  search  theory. 


The  proof  of  the  theorem  can  be  found  in  [Smith  87]. 


3.4.1  Filters 

In  order  to  reduce  the  search  space,  whenever  possible  KIDS  automatically  derives  necessary 
filters,  i.e.,  predicates  that  are  used  to  prune  off  branches  of  the  search  tree  that  do  not 
contain  feasible  solutions. 

The  rationale  underlying  the  derivation  of  necessary  filters  is  that  a  feasible  solution  {z  :  R) 
in  a  given  space  r  verifies  the  following  condition: 


(  Satisfies{z,  r)  A  0{x,  z)  )  (2) 

Therefore,  necessary  conditions  of  this  condition  can  be  used  as  filters,  ^(z,  r);,  i.e.,: 
necessary  feasibility  filters,  where 

3{z  :  R)  (  Satisfies{z,  f)  A  0{x,  y) )  ip{x,  r);  (3) 

In  other  words,  if  -'‘^{x,  f)  then  by  the  contrapositive  of  3,  there  are  no  feasible  solutions  in 
the  space  denoted  by  r). 
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Necessary  feasibility  filters,  denoted  by  are  defined  by  the  condition 

y{x  :  D)\/{r:  R)'^{z  :  R)  { I{x)  A  /(x,r)  (Satisfies {z,f)  A  0(x,z)  $(x,r))). 

(4) 

A  global  search  program  incorporating  necessary  filters  is  defined  by  the  following  proposition 
[Smith  87]: 

Proposition  3.1  If  Gf  is  a  well-founded  gs-theory  and  $  is  a  necessary  feasibility  filter, 
then  the  following  program  specification  is  consistent. 


function  F(x  :  D) :  set(R) 
where  I(x) 
returns  {z  |  0(x,  z)} 

=  if  $(x,  ro(x))then  F-gs(x,  ro(x))else  {} 

function  F-gs(x  :  D,f  :  R)  :  set(R) 
where  I(x)  A  I(x,  r)  A  $(x,  r) 
returns  {x  I  Satisfies(2,  r)  A  0(x,z)} 

=  {z  \  Extract(z,f)  A  0(x,z)} 

Ureduce(U,  {  F.gs(x,s)  \  Split(x,f,s)  A  $(z,s)}). 


3.5  A  First  Version  of  a  Program  for  the  K-MC  PROBLEM 

In  practical  terms,  the  creation  of  a  program  in  KIDS  using  a  given  global  search  algorithm 
involves  three  steps: 

1.  The  user  selects  a  global  search  theory  from  a  library  that  solves  the  problem  of  enu¬ 
merating  the  output  type  for  the  given  problem  -  currently  KIDS  library  includes  global 
search  theories  for  a  number  of  problem  domains  such  as  enumerating  sets,  sequences, 
maps  and  integers. 

2.  KIDS  automatically  finds  a  substitution  6  for  which  the  problem  to  be  solved  completely 
reduces  to  the  problem  of  the  same  type  for  which  KIDS  has  a  global  search  theory; 

3.  KIDS  automatically  derives  a  necessary  filter  -  filters  are  predicates  that  are  used  to 
eliminate  subspaces  of  the  search  space  that  do  not  contain  any  feasible  solution  from 
further  consideration  during  search 

1  Selection  of  a  Search  Tactic 


In  the  case  of  the  MC-PROBLEM,  we  selected  the  global  search  theory  for  enumerating  se¬ 
quences,  gs-sequences- over- finite-set,  since  the  output  type  of  the  problem  is  sequence. 
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2  Reduction  to  the  Selected  Search  Tactic 


The  MC-PROBLEM  complete  reduces  to  the  gs-theory  gs-sequences-over-finite-set.  Instanti¬ 
ating  the  definition  of  specialization  (1)  (see  page  14),  we  obtain  the  following  expression: 

W{k  :  integer)3{S  :  set{a))y{MC  :  seq{integer)) 


[range{MC)  C  {1..10} 

A  alternate-move(MC) 

A  POSSIBLE-MOVE (visited-states(MC,  <K,  K,  1>),  K) 

A  NO-CANNIBALISM (VISITED-STATES(MC,  <K,  K,  1>),  K) 
A  no-moves-back(visited-states(MC,  <K,  K,  1>)) 

A  everybody-made-it(visited-states(MC,  <K,  K,1>)) 
=>• 

{range(MC)  C  S)) 


The  proof  is  straightforward  and  results  in  the  translation: 


{5  {L.IO}}. 

KIDS  automatically  finds  the  translation  for  which  the  problem  to  be  solved  completely 
reduces  to  the  problem  of  the  same  type  selected  by  the  user,  if  such  a  translation  exists. 
An  excerpt  of  the  inference  performed  by  Rainbow^  to  find  the  translation  for  the  K-MC 
PROBLEM  is  listed  in  the  appendix  (section  6.2). 

3  Filters 


The  derivation  of  filters  is  performed  automatically  by  KIDS  using  the  directed  inference 
mechanism  to  derive  necessary  conditions  on  the  existence  of  solutions  for  a  subspace  de¬ 
scriptor  V.  We  came  to  the  conclusion  that,  in  order  for  Rainbow  to  derive  “good”  filters, 
it  is  important  to  have  distributive  laws  about  all  the  predicates  that  define  the  output 
condition. 

An  excerpt  of  the  inference  performed  by  Rainbow  when  deriving  filters  for  the  MC-PROBLEM 
is  listed  in  the  appendix  (section  6.3).  Notice  the  usage  of  the  distributive  laws  by  Rainbow  in 
order  to  distribute  the  predicates  that  define  the  output  condition  over  the  output  sequence 
MC,  considering  that  the  output  sequence  MC  can  be  written  as  a  function  of  the  space 
descriptor  V  as:  MC  =  concat(V,  Y-197). 

From  all  the  derived  terms,  KIDS  proposes  as  filters  the  ones  that  are  function  of  the  input 
variable  k  and  the  space  descriptor  V.  Several  of  the  filters  proposed  by  KIDS  are  redundant 

^Rainbow  is  the  name  of  the  theorem  prover  in  KIDS. 
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or  do  not  have  any  pruning  impact  -  a  good  example  of  that  is  the  filter  “true” .  From  the 
filters  proposed  by  KIDS,  we  selected  the  significant  ones  to  be  incorporated  into  the  global 
search  algorithm: 


NO-CANNIBALISM(VISITED-STATES(V,  <K,  K,  1>) ,  K) 

&  POSSIBLE-MOVE (VISITED-STATESCV,  <K,  K,  1>) ,  K) 
ft  NO-MOVES-BACK (VISITED-STATESCV,  <K,  K,  !>)) 
ft  ALTERNATE-MOVE (V) 


New  global  search  theory  incorporating  the  necessairy 
filter : (operator-specification  MC-TOP  number-of -solutions  ALL 
input-types  integer  output-types  seq(integer)  input-vars  K 
output-vars  MC  input-condition  K  >=  1 
output-condition 

range(MC)  subset  {1  . .  10}  ft  ALTERNATE-MOVE (MC) 
ft  POSSIBLE-MOVE(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 
ft  NO-CANNIBALISM(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 
ft  NO-MOVES-BACK(VISITED-STATES(MC,  <K,  K,  1>)) 
ft  EVERYBODY-MADE-IT(VISITED-STATES(MC,  <K,  K,  1>))) 


As  a  result  of  the  previous  steps  a  well-structured  but  inefficient  program  is  automatically 
created  by  KIDS,  using  the  global  search  tactic  and  incorporating  as  filters: 


■  ALTERNATE-MOVE  (V) 

•  NO-MOVES-BACK (VISITED-STATES(V,  <K,  K,  !>)) 

•  possible-move(visited-states(v,  <K,  K,  1>),  k) 

•  no-cannibalism(visited-states(v,  <k,  k,  1>),  k) 


function  MC-TOP-AUX 

(K:  integer,  V:  seq(integer) 

I  K  >=  1  ft  range(V)  subset  {1  ..  10}  ft  ALTERNATE-MOVE (V) 
ft  NO-MOVES-BACK(VISITED-STATES(V,  <K,  K,  !>)) 
ft  POSSIBLE-MOVE(VISITED-STATES(V,  <K,  K,  1>) ,  K) 
ft  NO-CANNIBALISM (VISITED-STATESCV,  <K,  K,  1>) ,  K)) 

returns 

(MC-TOP-SET:  set (seq (integer)) 

I  MC-TOP-SET 

=  {MC  I  (MC:  seq(integer)) 

EXTENDS (MC,  V) 

ft  EVERYBODY-MADE-IT(VISITED-STATES(MC,  <K,  K,  1>)) 
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&  NO-MOVES-BACK(VISITED-STATES(MC,  <K,  K.  1>)) 
k  NO-CANNIBALISM(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 
k  POSSIBLE-MOVE(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 
k  ALTERNATE-MOVE (MC)  k  range (MC)  subset  {1  . .  10}}) 

=  {MC  I  (MC:  seq(integer)) 

EVERYBODY-MADE-IT(VISITED-STATES(MC,  <K,  K,  1>)) 
ft  NO-MOVES-BACK(VISITED-STATES(MC,  <K,  K,  1>)) 
ft  NO-CANNIBALISM(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 
ft  POSSIBLE-MQVE(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 
ft  ALTERNATE-MOVE (MC)  ft  range(MC)  subset  {1  . .  10}  ft  MC  =  V} 

Tinion !  reduce 

(UNION! , 

{MC-TOP-AUX(K,  NEW-V)  |  (NEW-V:  seq(integer)) 
ALTERNATE-MOVE (NEW-V) 

ft  NO-MOVES-BACK(VISITED-STATES (NEW-V,  <K,  K.  !>)) 
ft  POSSIBLE-MOVE (VISITED-STATES (NEW-V,  <K,  K,  1>) ,  K) 
ft  NO-CANNIBALISM (VISITED-STATES (NEW-V,  <K,  K,  1>) ,  K) 
ft  ex  (I:  integer) 

(NEW-V  =  append(V,  I)  ft  I  in  {1  ..  10})}) 

function  MC-TOP  (K:  integer  I  K  >=  1) 
returns 

(MC-TOP-SET:  set(seq(integer)) 

I  MC-TOP-SET 

=  {MC  I  (MC:  seq(integer)) 

range(MC)  subset  {1  ..  10}  ft  ALTERNATE-MOVE (MC) 
ft  POSSIBLE-MOVE(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 
ft  NO-CANNIBALISM(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 
ft  NO-MOVES-BACK (VISITED-STATES (MC,  <K,  K,  !>)) 
ft  EVERYBODY-MADE-IT(VISITED-STATES(MC,  <K,  K,  !>))}) 

=  if  NO-CANNIBALISM(VISITED-STATES([],  <K,  K,  1>) ,  K) 

ft  POSSIBLE-MOVE(VISITED-STATES([],  <K,  K,  1>) ,  K) 
ft  NO-MOVES-BACK(VISITED-STATES([] ,  <K,  K,  1>)) 
ft  ALTERNATE-MOVE([]) 
then  MC-TOP-AUX(K,  []) 
else  {} 


3.6  Program  Optimization  in  kids 

In  general,  the  code  produced  by  KIDS  incorporating  a  search  tactic  is  well  structured  but 
very  inefficient,  with  several  opportunities  for  optimization.  KIDS  provides  several  tools  for 
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program  optimization.  In  the  following  sections  we  illustrate  some  of  such  optimization  tools. 

KIDS  generates  the  latex  code  for  reporting  the  derivation  process.  In  the  following  examples 
of  optimizations,  the  latex  code  describing  the  “before”  and  “after”  was  actually  produced 
by  KIDS.  KIDS  keeps  track  of  the  “history”  of  a  given  derivation,  i.e.,  the  sequence  of 
transformations  applied  to  the  code.  At  any  point  of  the  derivation,  the  user  can  restore  the 
program  as  it  was  at  an  earlier  stage.  The  user  can  also  replay  a  derivation. 


3.6.1  Context  Independent  Simplifier 

3. 6. 1.1  Type  1  It  consists  of  a  set  of  equations  treated  as  left-to- right  rewrite  rules  that 
are  fired  exhaustively  until  none  apply.  An  examples  of  a  rewrite  rule: 


•  if  true  then  P  else  Q  =  P 


Distributive  laws  are  also  treated  as  rewrite  rules. 


3.6.1.2  Type  2  Another  form  of  Context  Independent  Simplifier  is  done  by  replacing 
all  the  occurrences  of  a  local  variable  that  is  defined  by  an  equality.: 

{C{x)\x  =  e  k  P(a:)}  =  C'(e)|P(e) 

In  appendix  (6.3.2)  an  example  of  a  context-independent  simplification  performed  by  KIDS 
is  listed.  It  mainly  uses  the  distributive  laws  regarding  the  different  predicates  that  define 
the  output  condition  for  the  base  case  [  ],  where  they  simplify  to  true. 


3.6.2  Context  Dependent  Simplifier 

This  form  of  simplification  is  designed  to  simplify  a  given  expression  with  respect  to  its 
context.  The  way  it  works  is  gathering  all  the  predicates  that  hold  in  the  context  of  the 
expression  by  walking  up  the  abstract  syntax  tree.  The  expression  is  then  simplified  with 
respect  to  the  set  of  assumptions  that  hold  in  the  context  [Smith  91]. 

In  appendix  6.4  an  exampleof  a  context  dependent  simplification  is  shown. 


3.6.3  Finite  Differencing 

Roughly,  the  idea  behind  finite  differencing  is  to  perform  computations  incrementally  rather 
than  recomputing  them  from  scratch  all  the  time.  As  an  example  let’s  assume  that  inside 
f{x)  there  is  a  function  g(x)  and  that  x  changes  in  a  regular  way.  In  this  case,  it  might 
be  worthwhile  to  create  a  new  variable,  equal  to  g{x),  whose  value  is  maintained  and  which 
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allows  for  incremental  computation.  Finite  dilFerencing  can  be  decomposed  into  two  more 
basic  operations:  abstraction  and  simplification  [Smith  90,  Smith  91]. 


•  Abstraction  of  a  function  /  with  respect  to  expression  g(x)  adds  a  new  parameter  c  to 
/’s  parameter  list  (now  f(x,  c))  and  adds  c  =  g(x)  as  a  new  input  invariant  to  /.  Any 
call  to  /,  whether  a  recursive  call  within  /  or  an  external  call,  must  now  be  changed 
to  supply  the  appropriate  new  argument  that  satisfies  the  invaxiant  -  f(x)  is  changed 

to  /(a;,  </(«))• 

•  Simplification  -  context  Independent  simplification  is  applied  to  the  new  argument  in 
all  external  calls. 


In  this  process  all  occurrences  of  g(x)  are  replaced  by  c.  Often,  distributive  laws  apply  to 
g{U{x))  yielding  an  expression  of  the  form  U'{g{x))  and  so  U'{c).  The  real  benefit  in  the 
optimization  comes  from  the  last  step,  because  this  is  where  the  new  value  of  the  expression 
g(U{x))  is  computed  in  terms  of  the  old  value  of  g{x). 

The  process  of  finite  differencing  involves: 


•  the  selection  by  the  user  of  a  function  to  be  finite  differenced  -  since  the  space  de¬ 
scriptor  V  grows  incrementally,  a  good  hint  is  to  finite  difference  functions  that  have 
V  as  argument.  Normally  one  discovers  interesting  meaningful  abstractions  by  finite 
differencing,  which  is  reflected  in  the  name  of  the  variable  that  replaces  the  function. 

•  the  replacement  of  all  the  occurrences  of  the  function  by  the  corresponding  variable  - 
this  task  is  performed  automatically  by  KIDS 

•  simplification  (manually  driven) 


As  an  example,  the  function  VISITED-STATES(V,  <K,K,1>)  is  finite  differenced  into  the  vari¬ 
able  VS,  which  represents  the  set  of  states  visited.  The  function  SIZE(v)  is  finite  differenced 
into  the  variable  NUMBER-MOVES.  Note  that  V  is  the  space  descriptor  and  it  represents  the 
sequence  of  moves  so  far.  Therefore,  it  makes  sense  to  call  the  variable  that  corresponds  to 
SIZE(v)  as  NUMBER-MOVES. 

The  “before’ and  “after”  code  regarding  the  finite  differencing  of  VISITED-STATES(V,  <K,K,1>) 
is  listed  in  the  appendix  (see  section  6.5). 


3.7  Final  Program  for  the  MC  problem 

A  summary  of  the  derivation  steps  for  a  program  for  the  MC  PROBLEM  is  listed  below.  This 
summary  was  automatically  generated  by  KIDS  in  latex  code. 
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The  optimized  code  is  considerably  faster  than  the  initial  code  -  the  initial  code  finds  the 
solutions  for  100  problems  (k-MC  PROBLEM,  k=l...  100)  in  3.67  hours,  while  the  optimized 
code  only  takes  3.75  minutes,  reed  time. 


SUMMARY 

1.  Focus  Initialize  MC-TOP 

2.  Tactic  Global  Search  on  MC-TOP 

3.  Simplify,  context-independent-fast:  if  ##&##&##&  ##  then  MC-TOP-aux 

4.  Simplify,  context-independent-fast:  {MC  I  (##)  ##}  union!  reduce (UNION ! . 

5.  Simplify,  context-dependent,  forward-O,  backward-4:  ##  subset  ##  &... 

6.  Simplify,  context-dependent,  forwzurd-O,  backwzu:d-4:  ##(...)  4  ##( - 

7.  Simplify,  context-independent-fast:  K  >»  1 

8.  Simplify,  context-dependent,  forw2a:d-0,  backward-4:  0  <  K 

9.  Simplify,  context-independent-fast:  if  true  then  MC-TOP-AUX (##,  ##)  ... 

10.  FD  (general-purpose)  VS  =  VISITED-STATES(V,  <K,  K,  1>) 

11.  Unfold  ALL-BUT- 1ST- VISITED-STATES ([##] ,  last... 

12.  Unfold  VISITED-STATES ( [I] ,  last (VS))  using  rewrite  rule  UNFOLD-FUNCTION 

13.  Simplify,  cont ext- independent -f ast :  rest(if  empty(##)  then  [##]  else  [#. 

14.  Abstract  ALL-BUT- 1ST- VISITED-STATES ( [I] ,  last(VS))  into 
CURRENT-STATE  in  {MC-TOP-AUX (##,  ##,  ##)  ... 

15.  Unfold  ALL-BUT-1ST-VISITED-STATES([##],  last... 

16.  Unfold  VISITED-STATES ( [I] ,  last (VS))  using  rewrite  rule  UNFOLD-FUNCTION 

17.  Simplify,  context-independent-fast:  rest(if  empty(##)  then  [##]  else  [#. 

18.  FD  (general -piirpose)  NUMBER-NODES  =  size(V) 

19.  FD  (general-purpose)  CURRENT-STATE  =  last (VS) 

20.  Simplify,  context-independent-fast:  last (VS  ++  [<##,  ##,  ##>]) 

21.  Unfold  EVERYBODY-MADE-IT(VS)  using  rewrite  rule  UNFOLD-FUNCTION 

22.  Simplify,  context-dependent,  forward-0,  backward-4:  last (VS) 

23.  Unfold  SHIFT- ALTERNATE-MOVE ([I],  V-SIZE) 

24.  Simplify,  cont ext -independent -fast :  fa  (I:  integer)  (I  in  domain(##)  =>. 

25.  Abstract  MAPCL(I)  into  MAPCL-I  in  {MC-TOP-AUX (##,  ##,  . 

26.  Abstract  MAPML(I)  into  MAPML-I  in  {MC-TOP-AUX (##,  ##,  . 

27.  Refine  compile  into  Lisp:  MC-TOP-AUX,  MC-TOP 


The  final  version  of  the  program  for  the  K-MC  PROBLEM  that  we  derived  using  the  sequence 
of  transformations  listed  above  is  listed  in  the  appendix  (see  section  6.6). 


3.8  Complexity  of  the  MC  problem 

Figure  1  illustrates  the  complete  global  search  tree  for  the  program  for  the  K-MC  PROBLEM 
derived  with  KIDS  (k  =  1).  Each  node  of  the  tree  represents  the  sequence  of  moves  so  far. 
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At  the  root  of  the  tree,  the  empty  sequence,  represents  no  moves.  Notice  how  the  branches 
of  the  tree  are  pruned  off  by  the  filters.  For  instance,  the  branches  starting  with  nodes 
[2]?  [3],  [6],  [7],  [8],  [9],  and  [10]  are  pruned  off  at  the  first  level  of  the  tree.  In  other  words,  for 
the  case  of  1-MC  PROBLEM,  where  there  is  one  cannibal  and  one  missionary  on  the  left  bank 
in  the  initial  state,  the  only  moves  that  are  valid  (i.e.,  the  ones  that  pass  the  filters)  are: 
move  1  (move  1  missionary  and  1  cannibal  from  the  left  to  the  right  bank);  move  4  (move 
1  missionary  from  the  left  to  the  right  bank);  and  move  5  (move  1  cannibal  from  the  left 
bank  to  the  right  bank).  All  the  other  moves  (2,  3,  6,  7,  8,  9,  and  10)  violate  the  filters  - 
for  instance,  moves  greater  than  6  correspond  to  trying  to  move  people  from  the  left  bank 
to  the  right  bank  when  there  are  no  people  there.  For  the  solutions  starting  with  move  1, 
only  the  solutions  starting  with  [1,9]  are  expanded  to  the  third  level  and  pruned  off  at  this 
level.  Solutions  starting  with  move  4  and  move  5  are  pruned  at  the  second  level  of  the  tree. 
Notice  that  in  this  model  of  global  search,  solutions  can  be  extracted  from  all  nodes  of  the 
tree,  not  only  the  leaves.  Actually,  for  the  1-MC  PROBLEM  there  is  only  one  solution  [1],  i.e., 
the  sequence  with  the  single  move  1  (one  missionary  and  one  cannibal  from  the  left  to  the 
right  bank). 

The  following  table  shows  the  number  of  expanded  nodes  for  the  program  for  the  K-MC 
PROBLEM  derived  with  KIDS,  for  different  ka. 


K 

Number  of  Expanded  Nodes 

1 

6 

2 

31 

3 

38 

>4 

AK  +  A 

Table  2:  The  number  of  expanded  nodes  for  different  ka 

Figure  2  depicts  the  global  search  tree  for  the  K-MC  PROBLEM,  when  k>  i.  Aa  k  increases, 
the  only  additional  moves  that  are  feasible  are:  move  3,  i.e.,  move  two  cannibals  to  the  right 
bank,  and  move  10,  i.e.,  move  one  cannibal  back  to  the  left  bank.  In  other  words,  as  k 
increases  the  only  additional  moves  that  are  legal  consist  of  transporting  cannibals  to  the 
right  bank  by  moving  two  cannibals  to  the  right  bank  and  having  one  cannibal  bringing  the 
boat  back  to  the  left  bank.  This  way  missionaries  are  safe,  though  they  are  stuck  in  the  left 
bank.  In  other  words,  for  k>A,  there  is  no  solution  for  the  K-MC  PROBLEM,  considering  the 
generalization  that  we  adopted.  A  better  generalization  of  the  3-MC  PROBLEM  that  would 
allow  solutions  for  k  >  3  corresponds  to  increasing  the  number  of  cannibals  and  missionaries 
as  well  as  the  size  of  the  boat.  The  intuition  is  that  we  would  no  longer  be  dealing  with  a 
problem  of  linear  complexity. 
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[1.9] 


4  Al  Planners,  KIDS,  and  Search 


The  Missionaxies  and  Cannibals  Problem  (mc  PROBLEM)  is  a  classical  AI  planning  problem. 
Our  interest  in  this  problem  arose  as  the  result  of  some  difficulties  that  we  experienced  when 
trying  to  use  the  AI  planners  0-Plan2  and  SlPE-2  to  solve  it  [Gomes  94]  -  SlPE-2  could 
not  solve  problems  for  A:  >  45  in  less  than  20  minutes  real  time.  We  derived  a  program  in 
KIDS  for  the  K-MC  PROBLEM  that  clearly  outperformed  0-Plan2  and  SlPE-2.  Why  was 
that,  when  the  formulation  of  the  MC  PROBLEM  used  in  0-Plan2  and  SlPE-2  is  identical 
to  the  formulation  of  it  in  KIDS?  Furthermore,  both  the  AI  planners  and  KIDS  are  compiled 
in  Lisp.  The  answer  is  the  successive  source-to-source  transformations  applied  to  the  initial 
code  in  order  to  get  an  efficient  implementation.  The  source-to-source  transformations  add  a 
search  startegy  and  control  mechanism  to  the  initial  domain  theory  as  well  as  they  optimize 
the  initial  program  derived  by  KIDS.  As  mentioned  before,  the  initial  code  derived  in  KIDS 
finds  the  solutions  for  100  problems  (k-MC  PROBLEM,  k  =  1 . . .  100)  in  3.67  hours,  while  the 
optimize  code  only  talces  3.75  minutes,  real  time. 

KIDS  is  not  a  planner.  KIDS  is  an  framework  for  the  development  of  programs  from  for¬ 
mal  specifications.  KIDS  is  an  interactive  development  system  that  provides  tools  for  the 
design  and  development  of  correct  and  efficient  programs  from  formal  specifications.  KIDS 
embodies  a  transformational  approach  to  program  development.  The  methodology  of  pro¬ 
gram  development  by  program  transformation  consists  of  compiling,  either  manually  or 
automatically,  a  formal  specification  into  an  efficient  implementation  by  the  repeated  appli¬ 
cation  of  correctness-preserving,  source-to-source  transformations.  Though  the  development 
methodologies  for  program  transformation  and  for  the  design  of  efficient  compilers  share  a 
lot  in  common,  they  constitute  different  approaches.  The  approach  embodied  in  the  design 
of  compilers  is  mainly  based  on  a  loced  approach  of  syntax-directed  translation  to  recur¬ 
sively  decompose  a  program  into  elementary  constructs  that  can  be  directly  translated.  The 
program  transformation  methodology  emphasizes  global  analysis  of  high-level  specifications 
through  interaction  with  the  user. 

The  most  relevant  feature  of  KIDS  is  its  module  for  algorithm  design  and  the  approach  that  it 
embodies  -  the  explicit  recognition  that  different  problems  should  be  addressed  with  different 
search  strategies  and  control  mechanisms.  For  example,  in  the  case  of  the  K-MC  PROBLEM,  we 
adopted  a  global  search  tactic  with  backtracking  and  complete  search  -  the  program  derived 
with  KIDS  finds  all  the  solutions  for  the  K-MC  PROBLEM.  But,  as  discussed  in  section  3.8, 
the  K-MC  PROBLEM  has  linear  complexity  for  k  >  i.  Needless  to  say  that  most  planning 
and  scheduling  problems,  in  particular  real  world  problems,  are  intractable  and  therefore  it 
is  unrealistic  to  solve  such  problems  with  approaches  that  offer  guarantees  of  soundness  and 
completeness  -  a  central  concern  in  several  AI  planning  approaches*.  For  such  problems  it 
might  be  more  adequate  to  use  local  search  strategies  (e.g.,  simulated  annealing,  steepest 
ascent)  or  even  greedy  global  search  tactics  with  heuristic  search.  KIDS’s  philosophy,  which 
is  reinforced  and  expanded  in  its  successor  SPECWARE,  is  to  provide  a  library  of  problem 

®We  are  not  claiming  that  the  study  of  soundness  and  completeness  is  not  relevant  -  we  just  consider  that 
such  approaches  are  not  realistic  when  addressing  intractable  real  world  problems. 
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solving  methods  from  Computer  Science  (e.g.,  divide  and  conquer,  global  search),  Artificial 
Intelligence  (e.g.,  constraint  satisfaction  paradigm),  and  Operations  Research  (e.g..  Simplex, 
Integer  Programming,  etc).  The  idea  is  to  provide  a  classification  approach  [Smith  92],  i.e., 
a  set  of  high  level  transformations  embodying  the  dilferent  problem  solving  methods  as 
well  as  high  level  transformation  for  refinement  of  a  given  paradigm  into  another,  whenever 
applicable.  As  an  example,  a  problem  formulated  as  a  constraint  satisfaction  problem  might 
be  refined  successively  into  linear  programming  problem,  integer  problem  and  at  the  lower 
level  an  assignment  problem. 


5  Conclusions 


In  this  paper  we  describe  a  transformational  approach  applied  to  a  classical  AI  problem  -  the 
missionaries  and  cannibals  problem.  Our  interest  in  this  problem  arose  as  the  result  of  some 
difficulties  that  we  experienced  when  trying  to  use  the  AI  planners  O- PLAN  2  and  SlPE-2  to 
solve  it  [Gomes  94]  -  SlPE-2  could  not  solve  problems  for  A:  >  45  in  less  than  20  minutes 
real  time.  We  derived  a  program  in  KIDS  for  the  K-MC  PROBLEM  that  clearly  outperformed 
0-Plan2  and  SlPE-2.  Other  several  small-scale  problems  have  been  solved  using  KIDS. 
The  system  has  also  been  applied  with  success  to  larger,  more  realistic  problems  such  as 
military  transportation  scheduling.  We  believe  that  a  transformationed  approach  would  also 
be  adequate  to  planning  problems. 
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6  Appendix 


6.1  The  Domain  Theory  for  the  MC  problem 


THEORY  MISSIONARIES 


t - 

THEORY-IMPORTS  {} 


THEORY-TYPE-PARAMETERS  {} 


I - 

THEORY-TYPES 

constant  MAPCL:  map(integer,  integer) 

=  {|  1  ->  -1,  2  ->  0,  3  ->  -2, 

4  ->  0,  5  ->  -1,  6  ->  1,  7  ->  0, 
8  ->  2,  9  ->  0,  10  ->  1 
1} 

constant  MAPML:  map (integer,  integer) 

=  {|  1  ->  -1,  2  ->  -2,  3  ->  0, 

4  ->  -1,  5  ->  0,  6  ->  1,  7  ->  2, 
8  ->  0,  9  ->  1,  10  ->  0 
1} 


t - 

THEORY-OPERATIONS 


function  MC-TOP  (K:  integer  I  K  >=  1) 
returns 

(MC-ALL:  set (seq( integer))  • 

I  MC-ALL 

=  {MC  I  (MC:  seq(integer))  J 

range(MC)  subset  {1  ..  lO}  and  ALTERNATE-MOVE (MC) 
and  POSSIBLE-MOVE 

(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 
and  NO-CANNIBALISM 

(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 
and  NO-MOVES-BACK(VISITED-STATES(MC,  <K.  K,  1>)) 
and  EVERYBODY-MADE-IT(VISITED-STATES(MC,  <K,  K,  !>))}) 
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function  MC-SIZE  (A:  integer):  seq(integer) 

=  image 

(lambda  (Y:  integer)  if  empty (MC-TOP(Y))  then  0  else  Y, 
[1  ..  A]) 

function  ALTERNATE-MOVE  (MC:  seq(integer)) :  boolean 
=  fa  (I:  integer) 

(I  in  [1  , .  size(MC)] 

=>  I  mod  2  “=  0  and  MC(I)  <  6 

or  I  mod  2=0  and  MC(I)  >  5) 

function  POSSIBLE-MOVE 

(S:  seq(tuple(integer,  integer,  integer)),  K) :  boolean 
=  reduce 
('AND, 
image 

(lambda  (STATE:  tuple(integer,  integer,  integer)) 
STATE. 1  >=  0  and  STATE. 2  >=  0 

and  K  -  STATE. 1  >=  0  and  K  -  STATE. 2  >=  0, 

S)) 

function  SHIFT- ALTERNATE-MOVE 

(S:  seq(integer) ,  OFFSET:  integer):  boolean 
=  fa  (I:  integer) 

(I  in  domain (S) 

=>  (I  +  OFFSET)  mod  2  '=  0  and  S(I)  <  6 

or  (I  +  OFFSET)  mod  2=0  and  S(I)  >  5) 

function  VISITED-STATES 

(MC:  seq(integer) ,  IS:  tuple(integer,  integer,  integer)) 

:  seq(tuple(integer,  integer,  integer)) 

=  if  empty (MC)  then  [IS] 
else 

[IS]  ++  VISITED-STATES 
(rest (MC) , 

<IS.l  +  MAPCL(first(MC)), 

IS.2  +  MAPML(first(MC)),  IS.3  ♦  -1>) 

function  ALL-BUT- IST-VISITED-STATES 

(MC:  seq(integer) ,  IS:  tuple(integer,  integer,  integer)) 

:  seq(tuple(integer,  integer,  integer)) 

=  rest (VISITED-STATES (MC,  IS)) 

function  NO-CANNIBALISM 

(S:  seq(tuple(integer,  integer,  integer)),  K:  integer) 
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:  boolean 
=  reduce 
('AND, 
image 

(lambda  (STATE:  tuple (integer,  integer,  integer)) 

(STATE. 2  =  0  or  STATE. 2  >=  STATE. 1) 
and  (K  -  STATE. 2  *  0 

or  K  -  STATE. 2  >=  K  -  STATE. 1), 

S)) 

function  NO-MOVES-BACK 

(VIS-STATES:  seq (tuple (integer,  integer,  integer))):  boolean 
=  fa  (I:  integer,  J:  integer) 

(I  in  [1  . .  size (VIS-STATES)] 

and  J  in  [1  . .  size (VIS-STATES)]  and  I  "=  J 
=>  VIS-STATES (I)  "=  VIS-STATES (J)) 

function  CROSS-NO-MOVES-BACK 

(R:  seq(tuple(integer,  integer,  integer)), 

S:  seq(tuple(integer,  integer,  integer))) 

:  boolean 

=  fa  (I:  integer,  J:  integer) 

(I  in  [1  ..  size(R)] 

and  J  in  [1  . .  size(S)] 

=>  R(I)  -=  S(J)) 

klk 

function  EVERYBODY-MADE-IT 

(VIS-STATES:  seq(tuple (integer,  integer,  integer))):  boolean 
=  (last (VIS-STATES)  =  <0,  0,  -1>) 

jr - 

THEORY-LAWS 

assert  DISTRIBUTE-ALTERNATE-MOVE-OVER-EMPTY-SEQ 
fa  0  ALTERNATE-MOVE ([])  =  true 

assert  DISTRIBUTE-ALTERNATE-MOVE-OVER-SEQUENCE-CONCATENATE 
fa  (SI:  seq(integer) ,  S2:  seq(integer)) 

ALTERNATE-M0VE(S1  ++  S2) 

=  (ALTERNATE-MOVE (SI)  and  SHIFT-ALTERNATE-M0VE(S2,  size(Sl))) 

assert 

DISTRIBUTE-ALTERNATE-MOVE-OVER-PREPEND-ELEMENT-TO-SEQUENCE 
fa  (A,  S:  seq(integer)) 

ALTERNATE-MOVE(prepend(S,  A)) 
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=  (ALTERNATE-MOVE ([A])  and  SHIFT-ALTERNATE-MOVE(S,  1)) 


assert 

DISTRIBUTE-ALTERNATE-MOVE-OVER-APPEMD-ELEMENT-TO-SEQUENCE 

fa  (A:  integer,  S:  seq(integer)) 

ALTERNATE-MOVE(append(S,  A)) 

=  (ALTERNATE-MOVE(S)  and  SHIFT-ALTERNATE-MOVE( [A] ,  size(S))) 

assert  DISTRIBUTE-POSSIBLE-MQVE-OVER-SEQUENCE-CONCATENATE 
fa  (SI:  seq(tuple(integer,  integer,  integer)), 

S2:  seq (tuple (integer,  integer,  integer)),  K:  any-type) 
P0SSIBLE-M0VE(S1  ++  S2,  K) 

=  (POSSIBLE-MOVE (SI,  K)  and  POSSIBLE-MOVE (S2,  K)) 

assert  DISTRIBUTE-POSSIBLE-MOVE-OVER-SINGLETON-SEQUENCE 
fa  (M:  any-type,  L) 

P0SSIBLE-M0VE([<M,  M,  L>] ,  M) 

=  (if  M  >  0  then  true  else  false) 


assert 

DISTRIBUTE-POSSIBLE-MOVE-OVER-PREPEND-ELEMENT-TO-SEQUENCE 
fa  (A,  S:  seq(tuple(integer,  integer,  integer)),  K:  any-type) 
POSSIBLE-MOVE(prepend(S,  A),  K) 

=  (P0SSIBLE-M0VE([A],  K)  and  P0SSIBLE-M0VE(S,  K)) 

assert 

DISTRIBUTE-POSSIBLE-MOVE-OVER-APPEND-ELEMENT-TO-SEQUENCE 
fa  (A:  tuple (integer,  integer,  integer), 

S:  seq(tuple(integer,  integer,  integer)),  K:  any-type) 
POSSIBLE-MOVE(append(S,  A),  K) 

=  (P0SSIBLE-M0VE(S,  K)  and  POSSIBLE-MOVE ( [A] ,  K)) 

assert  DISTRIBUTE-VISITED-STATES-OVER-EMPTY-SEQ 
fa  (STATES:  tuple (integer,  integer,  integer)) 
VISITED-STATES([],  STATES)  »  [STATES] 

assert  DISTRIBUTE-VISITED-STATES-OVER-SEQUENCE-CONCATENATE 
fa  (SI:  seq(integer) ,  S2:  seq(integer) , 

STATES:  tuple (integer,  integer,  integer)) 
VISITED-STATES(S1  ++  S2,  STATES) 

=  VISITED-STATES(S1,  STATES) 

++  ALL-BUT-IST-VISITED-STATES 

(S2,  last(VISITED-STATES(Sl,  STATES))) 


assert 
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DISTRIBUTE-VISITED-STATES-OVER-PREPEND-ELEMENT-TO-SEQUENCE 
fa  (A,  S:  seq(integer) , 

STATES:  tuple(integer,  integer,  integer)) 
VISITED-STATES(prepend(S,  A),  STATES) 

=  VISITED-STATES([A] ,  STATES) 

++  ALL-BUT- 1ST- VISITED-STATES 

(S,  last (VISITED-STATES ( [A] ,  STATES))) 


assert 

DISTRIBUTE-VISITED-STATES-OVER-APPEND-ELEMENT-TO-SEqUENCE 
fa  (A:  integer,  S:  seq(integer) , 

STATES:  tuple(integer,  integer,  integer)) 
VISITED-STATES(append(S,  A),  STATES) 

=  VISITED-STATES (S,  STATES) 

++  ALL-BUT- 1ST- VISITED-STATES 

([A],  last (VISITED-STATES (S,  STATES))) 

assert  DISTRIBUTE-NO-CANNIBALISM-OVER-SEQUENCE-CONCATENATE 
fa  (SI:  seq(tuple(integer,  integer,  integer)), 

S2:  seq (tuple (integer,  integer,  integer)),  K:  integer) 
NO-CANNIBALISM (SI  ++  S2,  K) 

=  (N0-CANNIBALISM(S1,  K)  and  N0-CANNIBALISM(S2,  K)) 

assert  DISTRIBUTE-NO-CANNIBALISM-OVER-SINGLETON-SEQUENCE 
fa  (K:  integer,  L) 

NO-CANNIBALISM([<K,  K,  L>] ,  K)  =  true 
assert 

DISTRIBUTE-NO-CANNIBALISM-OVER-PREPEND-ELEMENT-TO-SEQUENCE 
fa  (A,  S:  seq(tuple(integer,  integer,  integer)),  K:  integer) 
NO-CANNIBALISM(prepend(S,  A),  K) 

=  (NO-CANNIBALISM([A] ,  K)  and  NO-CANNIBALISM (S,  K)) 


assert 

DISTRIBUTE-NO-CANNIBALISM-OVER-APPEND-ELEMENT-TO-SEQUENCE 
fa  (A:  tuple(integer,  integer,  integer), 

S:  seq (tuple (integer,  integer,  integer)),  K:  integer) 
NO-CANNIBALISM(append(S,  A),  K) 

=  (NO-CANNIBALISM ([A],  K)  and  NO-CANNIBALISM (S,  K)) 

assert  DISTRIBUTE-NO-MOVES-BACK-OVER-SINGLETON-SEQ 
fa  (A)  N0-M0VES-BACK([A])  =  true 

assert  DISTRIBUTE-NO-MOVES-BACK-OVER-SEQUENCE-CONCATENATE 
fa  (R:  seq(tuple(integer,  integer,  integer)). 


32 


S:  seq(tuple(integer,  integer,  integer))) 
NO-MOVES-BACK(R  ++  S) 

=  (NO-MOVES-BACK(R)  and  NQ-MOVES-BACK(S) 
and  CR0SS-N0-M0VES-BACK(R,  S)) 


assert 

DISTRIBUTE-NO-MOVES-BACK-OVER-PREPEND-ELEMENT-TO-SEQUENCE 
fa  (S:  seq(tuple(integer,  integer,  integer)),  A) 
NO-MOVES-BACK (prepend (S,  A)) 

*  (NO-MOVES-BACK (S)  and  CR0SS-N0-M0VES-BACK(S,  [A])) 


assert 

DISTRIBUTE-NO-MOVES-BACK-OVER-APPEND-ELEMENT-TO-SEQUENCE 
fa  (S:  seq(tuple(integer,  integer,  integer)), 

A:  tuple (integer,  integer,  integer)) 

NO-MOVES-BACK (append (S,  A)) 

=  (NO-MOVES-BACK (S)  and  CR0SS-N0-M0VES-BACK(S,  [A])) 


assert 

DISTRIBUTE-EVERYBODY-MADE-IT-OVER-SEQUENCE-CONCATENATE 
fa  (SI:  seq (tuple (integer,  integer,  integer)), 

S2:  seq (tuple (integer,  integer,  integer))) 

EVERYB0DY-MADE-IT(S1  ++  S2)  =  EVERYB0DY-MADE-IT(S2) 

assert 

DISTRIBUTE-EVERYBODY-MADE-IT-OVER-PREPEND-ELEMENT-TO-SEQUENCE 
fa  (A,  S:  seq(tuple(integer,  integer,  integer))) 

EVERYBODY-MADE-IT(prepend(S,  A))  =  EVERYBODY-MADE-IT(S) 

assert 

DISTRIBUTE-EVERYBODY-MADE-IT-OVER-APPEND-ELEMENT-TO-SEQUENCE 
fa  (A,  S) 

EVERYBODY-MADE-IT(append(S,  A))  =  EVERYBODY-MADE-IT([A]) 

- 

THEORY-RULES 

"fa  0  ALTERNATE-MOVE([])  *  true" 
function 

MISSIONARIES-RULE-DISTRIBUTE-ALTERNATE-MOVE-OVER-EMPTY-SEQ-REWRITE 
0  rb-compile-simplificat ion-equality 

DISTRIBUTE-ALTERNATE-MOVE-OVER-EMPTY-SEQ 


"fa  (SI,  S2) 

ALTERNATE-MOVE (SI  ++  S2) 
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=  (ALTERNATE-MOVE(Sl)  and  SHIFT-ALTERNATE-MOVE (S2.  size(Sl)))" 
function 

MISSIONARIES-RULE-DISTRIBUTE-ALTERNATE-MOVE-OVER-SEQUENCE-CONCATENATE-REWRITE 

()  rb-compile-simplificat ion-equality 

DISTRIBUTE-ALTERNATE-MOVE-OVER-SEqUENCE-CONCATENATE 

"fa  (A,  S) 

ALTERNATE-MOVE(prepend(S ,  A) ) 

=  (ALTERNATE-MOVE ([A])  and  SHIFT-ALTERNATE-MOVE(S,  1))" 
function 

MISSIONARIES-RULE-DISTRIBUTE-ALTERNATE-MOVE-OVER-PREPEND-ELEMENT-TO-SEQUENCE-REWR 
0  rb-compile-simplificat ion-equality 

DISTRIBUTE-ALTERNATE-MOVE-OVER-PREPEHD-ELEMENT-TO-SEQUENCE 

"fa  (A,  S) 

ALTERNATE-MOVE (append (S ,  A) ) 

=  (ALTERNATE-MOVE(S)  and  SHIFT- ALTERNATE-MOVE ( [A] ,  size(S)))" 
function 

MI SS I ONARIES-RULE-DI STOIBUTE-ALTERNATE-MOVE-0 VER-APPEND-ELEMENT-TO - SEQUENCE-REWRI 
0  rb-compile-simplificat ion-equality 

DISTRIBUTE-ALTERNATE-MOVE-OVER-APPEND-ELEMENT-TO-SEQUENCE 

"fa  (SI,  S2,  K) 

P0SSIBLE-M0VE(S1  ++  S2,  K) 

=  (P0SSIBLE-M0VE(S1,  K)  and  P0SSIBLE-M0VE(S2,  K))" 
function 

MISSIONARIES-RULE-DISTRIBUTE-POSSIBLE-MOVE-OVER-SEQUENCE-CONCATENATE-REWRITE 
()  rb-compile-simplif ication-equelity 

DISTRIBUTE-POSSIBLE-MOVE-OVER-SEQUENCE-CONCATENATE 

"fa  (A,  S,  K) 

POSSIBLE-MOVE (prepend (S,  A),  K) 

=  (POSSIBLE-MOVE ([A],  K)  and  P0SSIBLE-M0VE(S,  K))" 
function 

MISSIONARIES-RULE-DISTRIBUTE-POSSIBLE-MOVE-OVER-PREPEND-ELEMENT-TO-SEQUENCE-REWRI 
()  rb-compile-simplificat ion-equality 

DISTRIBUTE-POSSIBLE-MOVE-OVER-PREPEND-ELEMENT-TO-SEQUENCE 

"fa  (M,  L) 

P0SSIBLE-M0VE([<M,  M,  L>] ,  M) 

=  (if  M  >  0  then  true  else  false)" 
fiinction 

MISSIONARIES-RULE-DISTRIBUTE-POSSIBLE-MOVE-OVER-SINGLETON-SEQUENCE-REWRITE 
0  rb-compile-simplif ication-equality 

DISTRIBUTE-POSSIBLE-MOVE-OVER-SINGLETON-SEQUENCE 
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"fa  (A,  S,  K) 

POSSIBLE-MOVE(append(S,  A),  K) 

=  (POSSIBLE-MOVE (S,  K)  and  POSSIBLE-MOVE([A] ,  K))" 
function 

MISSIONARIES-RULE-DISTRIBUTE-POSSIBLE-MOVE-OVER-APPEND-ELEMENT-TO-SEQUENCE-REWRIT 
()  rb-compile-simplificat ion-equality 

DISTRIBUTE-POSSIBLE-MOVE-OVER-APPEND-ELEMENT-TO-SEQUENCE 

"fa  (STATES)  VISITED-STATES( □ ,  STATES)  *  [STATES]" 
function 

MISSIONARIES-RULE-DISTRIBUTE-VISITED-STATES-OVER-EMPTY-SEQ 
0  rb-compile-simplificat ion-equality 

DISTRIBUTE-VISITED-STATES-OVER-EMPTY-SEQ 

"fa  (SI,  S2,  STATES) 

VISITED-STATES(S1  ++  S2,  STATES) 

=  VISITED-STATES(S1,  STATES) 

++  VISITED-STATES(S2,  last (VISITED-STATES(S1,  STATES)))" 
function 

MISSIONARIES-RULE-DISTRIBUTE-VISITED-STATES-OVER-SEQUENCE-CONCATENATE-REWRITE 
()  rb-compile-simplificat ion-equeJ.ity 

DISTRIBUTE-VISITED-STATES-OVER-SEQUENCE-CONCATENATE 

"fa  (A,  S,  STATES) 

VISITED-STATES(prepend(S,  A),  STATES) 

=  VISITED-STATES([A] ,  STATES) 

++  VISITED-STATES(S,  last(VISITED-STATES([A] ,  STATES)))" 
fiinction 

MISSIONARIES-RULE-DISTRIBUTE-VISITED-STATES-OVER-PREPEND-ELEMENT-TO-SEQUENCE-REWR 

0  rb-compile-simplificat ion-equality 

DISTRIBUTE-VISITED-STATES-OVER-PREPEMD-ELEMENT-TO-SEQUENCE 

"fa  (A,  S.  STATES) 

VISITED-STATES (append (S,  A),  STATES) 

=  VISITED-STATES (S,  STATES) 

++  VISITED-STATES ([A],  last (VISITED-STATES (S .  STATES)))" 
function 

MISSIONARIES-RULE-DISTRIBUTE-VISITED-STATES-OVER-APPEND-ELEMENT-TO-SEQUENCE-REWRI 
0  rb-compile-simplificat ion-equality 

DISTRIBUTE-VISITED-STATES-OVER-APPEND-ELEMENT-TO-SEQUENCE 

"fa  (SI,  S2,  K) 

N0-CANNIBALISM(S1  ++  S2,  K) 

=  (N0-CANNIBALISM(S1,  K)  and  NO-CANNIBALISM (S2,  K))" 
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function 

MISSIONARIES-RULE-DISTRIBUTE-NO-CANNIBALISM-OVER-SEqUENCE-CONCATENATE-REWRITE 
()  rb-compile-simplificat ion-equality 

DISTRIBUTE-NO-CANNIBALISM-OVER-SEQUENCE-CONCATENATE 

"fa  (A,  S,  K) 

NO-CANNIBALISM (prependCS,  A),  K) 

=  (NO-CANNIBALISM( [A] ,  K)  and  NO-CANNIBALISM(S,  K))" 
function 

MISSIONARIES-RULE-DISTRIBUTE-NO-CANNIBALISM-OVER-PREPEND-ELEMENT-TO-SEQUENCE-REWR 
()  rb-compile-simplification-equality 

DISTRIBUTE-NO-CANNIBALISM-OVER-PREPEND-ELEMENT-TO-SEqUENCE 

"fa  (A,  S,  K) 

NO-CANNIBALISM (append (S,  A),  K) 

=  (NO-CANNIBALISM([A] ,  K)  and  NO-CANNIBALISM(S,  K))" 
function 

MISSIONARIES-RULE-DISTRIBUTE-NO-CANNIBALISM-OVER-APPEND-ELEMENT-TO-SEqUENCE-REWRI 
()  rb-compile-simplificat ion-equality 

DISTRIBUTE-NO-CANNIBALISM-OVER-APPEND-ELEMENT-TO-SEqUENCE 

"fa  (K,  L)  NO-CANNIBALISM ([<K,  K,  L>] ,  K)  =  true" 
function 

MISSIONARIES-RULE-DISTRIBUTE-NO-CANNIBALISM-OVER-SINGLETON-SEqUENCE-REWRITE 
()  rb-compile-simplification-equality 

DI STRIBUTE-NO-CANNIBALI SM- OVER-S INGLETON-SEqUENCE 

"fa  (A)  N0-M0VES-BACK([A])  =  true" 
function 

MISSIONARIES-RULE-DISTRIBUTE-NO-MOVES-BACK-OVER-SINGLETON-SEq-REWRITE 
0  rb-compile-simplificat ion-equality 

DI STRIBUTE-NO -MO VES-BACK-0 VER-S INGLETON-SEq 

"fa  (R,  S) 

N0-M0VES-BACK(R  ++  S) 

=  (NO-MOVES-BACK(R)  and  NO-MOVES-BACK(S) 
and  CR0SS-N0-M0VES-BACK(R,  S))" 

function 

MISSIONARIES-RULE-DISTRIBUTE-NO-MOVES-BACK-OVER-SEqUENCE-CONCATENATE-REWRITE 
()  rb-compile-simplificat ion-equality 

DISTRIBUTE-NO-MOVES-BACK-OVER-SEqUENCE-CONCATENATE 

"fa  (S,  A) 

NO-MO VES-BACK (prependCS,  A)) 

=  (NO-MOVES-BACK(S)  and  CR0SS-N0-M0VES-BACK(S,  [A]))" 
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function 

MISSIONARIES-RULE-DISTRIBUTE-NO-MOVES-BACK-DVER-PREPEND-ELEMENT-TO-SEQUENCE-REWRI 

()  rb-compile-simplificat ion-equality 

DISTRIBUTE-NO-MOVES-BACK-OVER-PREPEND-ELEMENT-TO-SEQUENCE 

"fa  (S,  A) 

NO-MOVES-BACK(append(S,  A)) 

=  (NO-MOVES-BACK(S)  and  CRQSS-NO-MOVES-BACK(S,  [A]))" 
function 

MISSIONARIES-RULE-DISTRIBUTE-NQ-MQVES-BACK-OVER-APPEND-ELEMENT-TO-SEQUENCE-REWRIT 
()  rb-compile-simplificat ion-equality 

DISTRIBUTE-NQ-MOVES-BACK-OVER-APPEND-ELEMENT-TO-SEQUENCE 

"fa  (SI,  S2) 

EVERYB0DY-MADE-IT(S1  ++  S2)  =  EVERYB0DY-MADE-IT(S2) " 
function 

MISSIONARIES-RULE-DISTRIBUTE-EVERYBODY-MADE-IT-OVER-SEQUENCE-CONCATENATE-REWRITE 
0  rb-compile-simplificat ion-equality 

DISTRIBUTE-EVERYBODY-MADE-IT-OVER-SEQUENCE-CONCATENATE 

"fa  (A,  S) 

EVERYBODY-MADE-IT (prepend (S,  A))  »  EVERYBODY-MADE-IT(S)" 
function 

MISSIONARIES-RULE-DISTRIBUTE-EVERYBODY-MADE-IT-DVER-PREPEND-ELEMENT-TO-SEQUENCE-R 
0  rb-compile-simplificat ion-equality 

DISTRIBUTE-EVERYBODY-MADE-IT-OVER-PREPEND-ELEMENT-TD-SEQUENCE 

"fa  (A,  S) 

EVERYBODY-MADE-IT(append(S,  A))  =  EVERYBODY-MADE-IT ( [A] ) " 
function 

MISSIONARIES-RULE-DISTRIBUTE-EVERYBODY-MADE-IT-OVER-APPEND-ELEMENT-TO-SEQUENCE-RE 
0  rb-compile-simplificat ion-equality 

DISTRIBUTE-EVERYBODY-MADE-IT-OVER-APPEND-ELEMENT-TO-SEQUENCE 

jj - 

THEORY-MISC-LAWS 

55 - 

THEORY-MISC-DEFS 

55 - 

THEORY-MISC-RULES 

55 - - 

THEORY-MISC-FORMS 
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•/. - 

end-theory 


6.2  Excerpt  of  Rainbow  Inference  to  Reduce  the  MC  problem  to 
to  the  gs-theory  gs-sequences-over-finite-set 


Rainbow  is  the  theorem  prover  in  KIDS. 


Selecting  a  standard  global  search  theory: 
GS-SEQUENCES-QVER-FINITE-DOMAIN 

Creating  a  specialized  global  search  theory  for  the  problem 
by  deriving  a  complete-reduction  substitution. 

Performing  forward  inference  to  acquire  new  assumptions 
Depth  boiind: 

Entering  Rainbow  to  derive  a  CONSEQUENT 

Target  vsiriables:  var  MC:  seq(integer)  constajit  K:  integer 
Assumptions:  none 

Goal:  EVERYBODY-MADE-IT(VISITED-STATES(MC,  <K,  K,  !>)) 
ft  NO-MOVES-BACK(VISITED-STATES(MC,  <K,  K,  1>)) 
ft  NO-CANNIBALISM(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 
ft  POSSIBLE-MOVE(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 
ft  ALTERNATE-MOVE (MC)  ft  range (MC)  subset  {1  ..  10}  ft  1  <=  K 
Initial  terms  at  depth  0 

1.  true 

2.  1  <*  K 

3.  ALTERNATE-MOVE (MC) 

4.  r2uige(MC)  subset  {1  ..  10} 

5.  NO-MOVES-BACK(VISITED-STATES(MC,  <K,  K,  !>)) 

6.  EVERYBODY-MADE-IT(VISITED-STATES(MC,  <K,  K,  !>)) 

7.  POSSIBLE-MOVE(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 

8.  NO-CANNIBALISM (VISITED-STATES(MC,  <K,  K,  1>) ,  K) 

Derived  terms  at  depth  1 

1.  size(range(MC))  <=  size({l  ..  10}) 

2.  setdiff (range (MC) ,  {1  ..  10})  =  {} 


Derived  terms  at  depth  2 
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1.  size(remge(MC))  <=  10 


All  derived  terms: 

1.  true 

2.  1  <=  K 

3.  ALTERNATE-MOVE (MC) 

4.  rauige(MC)  subset  {1  ..  10} 

5.  size(range(MC))  <=  size({l  ..  10}) 

6.  size(range(MC))  <=  10 

7.  setdiff (range (MC) ,  {1  ..  10})  =  O 

8.  NO-MOVES-BACK(VISITED-STATES(MC,  <K,  K,  !>)) 

9.  EVERYBODY-MADE-IT(VISITED-STATES(MC,  <K,  K,  !>)) 

10.  POSSIBLE-MQVE(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 

11.  NO-CANNIBALISM(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 

Entering  Rainbow  to  derive  an  ANTECEDENT 
Target  variables: 

Assumptions: 

1.  setdiff (range (MC) ,  {1  ..  10})  =  {} 

2.  NO-CANNIBALISM(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 

3.  POSSIBLE-MOVE (VISITED-STATES(MC.  <K,  K,  1>) ,  K) 

4.  EVERYBODY-MADE-IT(VISITED-STATES(MC,  <K,  K,  !>)) 

5.  N0-M0VES-BACK(VISITED-STATES(MC,  <K,  K,  !>)) 

6.  size (range (MC))  <=  10 

7.  size (range (MC))  <=  size({l  ..  10}) 

8.  range(MC)  subset  {1  ..  10} 

9.  ALTERNATE-MOVE (MC) 

10.  1  <=  K 

Goal:  reuige(MC)  subset  S 
Subgoal:  range (MC)  subset  S 
Subgoal:  true 
RAINBOW  result:  true 

Substitution:  {S->{1  ..  10}} 


Inferred  i/o-relation:  true 

Complete-reduction  substitution:  {S->'Cl  • .  10}} 


6.3  Excerpt  of  Rainbow  Inference  to  Derive  Filters 


New  global  search  theory  incorporating  the  substitution: 
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(operator-specif ication  MC~T0P  iiiiniber“of "solutions  ALL 

input-types  integer  output-types  seq(integer)  input-vars  K 

output-vaxs  MC  input-condition  K  >*  1 

output-condition 

ramgeCMC)  subset  {1  . .  10}  t  ALTERNATE-MOVE (MC) 

&  POSSIBLE-MOVE(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 

&  NO-CANNIBALISM (VISITED-STATES(MC,  <K,  K,  1>) ,  K) 

&  NO-MOVES-BACK(VISITED-STATES(MC,  <K,  K,  !>)) 
ft  EVERYBODY-MADE-IT(VISITED-STATES(MC,  <K,  K,  1>))) 

Deriving  a  filter  on  subspaces  by  finding  a  necessary  condition  on 
the  existence  of  solutions  in  a  subspace: 

Entering  Rainbow  to  derive  a  CONSEQUENT 
Target  variables:  constant  K:  integer  var  V 
Assumptions: 

1.  1  <=  K 

Goal:  range(V)  subset  {1  ..  10}  ft  MC  =  concat(V,  Y-197) 
ft  EVERYBODY-MADE-IT(VISITED-STATES(MC,  <K,  K,  !>)) 
ft  NO-MOVES-BACK(VISITED-STATES(MC,  <K,  K,  !>)) 
ft  NO-CANNIBALISM(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 
ft  POSSIBLE-MOVE(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 
ft  ALTERNATE-MOVE (MC)  ft  range (MC)  subset  {1  ..  10} 

Initial  terms  at  depth  0 

1.  true 

2.  range(V)  subset  {1  ..  10} 

3.  ALTERNATE-MOVE (MC) 

4.  range(MC)  subset  {1  ..  10} 

5.  MC  =  concat(V,  Y-197) 

6.  N0-M0VES-BACK(VISITED-STATES(MC,  <K,  K,  !>)) 

7.  EVERYBODY-MADE-IT(VISITED-STATES(MC,  <K,  K,  !>)) 

8.  POSSIBLE-MOVE (VISITED-STATES(MC,  <K,  K,  1>) ,  K) 

9.  NO-CANNIBALISM (VISITED-STATES(MC,  <K,  K.  1» ,  K) 

Derived  terms  at  depth  1 

1.  ALTERNATE-MOVE (V) 

2.  remge(Y-197)  subset  {1  ..  10} 

3.  size (range (V))  <=  size({l  ..  10}) 

4.  set diff (range (V) ,  {1  ..  10})  =  {} 

5.  SHIFT-ALTERNATE-M0VE(Y-197,  size(V)) 

6.  N0-M0VES-BACK(VISITED-STATES(V,  <K,  K,  !>)) 

7.  POSSIBLE-MOVE (VISITED-STATES(V,  <K,  K,  1>) ,  K) 

8.  NO-CANNIBALISM (VISITED-STATES(V,  <K,  K,  1>) ,  K) 

9.  NO-MOVES-BACK 
(ALL-BUT-IST-VISITED-STATES 
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(Y-197,  last(VISITED-STATES(V,  <K,  K,  1>)))) 

10.  EVERYBODY-MADE-IT 
(ALL-BUT-IST-VISITED-STATES 

(Y-197,  last(VISITED-STATES(V,  <K,  K,  !>)))) 

11.  POSSIBLE-MOVE 
(ALL-BUT-IST-VISITED-STATES 

(Y-197,  last(VISITED-STATES(V,  <K,  K,  !>))), 
K) 

12.  NO-CANNIBALISM 
(ALL-BUT-IST-VISITED-STATES 

(Y-197,  last(VISITED-STATES(V,  <K,  K,  !>))), 
K) 

13.  size (range (MC))  <=  size({l  ..  lO}) 

14.  setdiff (range (MC) ,  {1  ..  10})  =  {} 

15 .  CROSS-NO-MOVES-BACK 
(VISITED-STATES(V,  <K,  K,  1>) , 

ALL-BUT-IST-VISITED-STATES 

(Y-197,  last(VISITED-STATES(V,  <K,  K,  !>)))) 


Derived  terms  at  depth  2 

1.  size (range (V))  <=  10 

2.  size(range(Y-197))  <=  size({l  ..  10}) 

3.  setdiff (range(Y-197) ,  {1  ..  10})  =  {} 

4.  size(range(Y-197)  union  range(V))  <=  size({l  ..  10}) 

5.  s ize (range (MC))  <=  10 

6.  setdiff (range (V) ,  {1  ..  10}) 

=  setdiff  (reLnge(MC) ,  {1  ..  10}) 

7.  setdiff (range (MC) ,  {1  ..  10}) 

=  setdiff (range (V) ,  {1  ..  10}) 

All  derived  terms: 

1 .  true 

2.  ALTERNATE-MOVE (V) 

3.  range(V)  subset  {1  ..  10} 

4.  range(Y-197)  subset  {1  ..  10} 

5.  size (range (V))  <=  size({l  ..  10}) 

6.  size (range (V))  <=  10 

7.  setdiff (range (V) ,  {1  ..  10})  =  {} 

8.  SHIFT- ALTERNATE-MOVE (Y-197,  size(V)) 

9.  size(range(Y-197))  <=  size({l  ..  10}) 

10.  setdiff (range (Y-197) ,  {1  ..  10})  «  {} 

11.  NO-MOVES-BACK(VISITED-STATES(V,  <K,  K,  !>)) 

12.  size (range (Y-197)  union  range(V))  <=  size({l  ..  10}) 

13.  POSSIBLE-MOVE(VISITED-STATES(V,  <K,  K,  1>) ,  K) 

14.  NO-CANNIBALISM(VISITED-STATES(V,  <K,  K,  1>) ,  K) 
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15.  ALTERNATE-MOVE (MC) 

16.  NO-MOVES-BACK 
(ALL-BUT- IST-VISITED-STATES 

(Y-197,  last(VISITED-STATES(V,  <K,  K,  !»))) 

17.  EVERYBODY-MADE-IT 
(ALL-BUT- IST-VISITED-STATES 

(Y-197,  last(VISITED-STATES(V,  <K,  K,  !»))) 

18.  range (MC)  subset  {1  ..  10} 

19.  POSSIBLE-MOVE 
(ALL-BUT- IST-VISITED-STATES 

(Y-197,  last(VISITED-STATES(V,  <K,  K,  !>))), 

K) 

20.  NO-CANNIBALISM 
(ALL-BUT-IST-VISITED-STATES 

(Y-197,  last(VISITED-STATES(V,  <K,  K,  !»)), 

K) 

21.  size(remge(MC))  <=  size({l  ..  10}) 

22.  size (range (MC))  <=  10 

23.  setdiff (range (MC) ,  {1  ..  10})  =  O 

24.  MC  =  concat(V,  Y-197) 

25.  NO-MOVES-BACK (VISITED-STATES(MC,  <K,  K,  !>)) 

26.  EVERYBODY-MADE-IT(VISITED-STATES(MC,  <K,  K,  !>)) 

27.  setdiff (range (V) ,  {1  ..  10}) 

=  setdiff (range (MC) ,  {1  ..  10}) 

28.  setdiff (range (MC) ,  {1  ..  10}) 

=  setdiff (range (V) ,  {1  ..  10}) 

29.  POSSIBLE-MOVE(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 

30.  NO-CANNIBALISM(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 

31.  CROSS-NO-MOVES-BACK 
(VISITED-STATES(V,  <K,  K,  1>) , 

ALL-BUT-IST-VISITED-STATES 

(Y-197,  last(VISITED-STATES(V,  <K,  K,  !>)))) 


From  all  the  derived  terms,  KIDS  proposes  to  the  user  as  filters  the  ones  that  are  a  function 
of  the  input  variable  k  and  the  space  descriptor  V.  Several  of  the  filters  proposed  by  KIDS 
are  redundant  or  don’t  have  any  pruning  impact  -  a  good  example  of  that  is  the  filter  “true” . 
From  the  filters  proposed  by  KIDS,  the  significant  ones  were  selected: 


NO-CANNIBALISM(VISITED-STATES(V,  <K,  K,  1>) ,  K) 

&  POSSIBLE-MOVE (VISITED-STATES(V,  <K,  K,  1>) ,  K) 
&  NO-MOVES-BACK (VISITED-STATES(V,  <K,  K,  !>)) 

&  ALTERNATE-MOVE (V) 
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New  global  search  theory  incorporating  the  necessary 
filter : (operator-specification  MC-TOP  number-of -solutions  ALL 
input-types  integer  output-types  seq(integer)  input-vars  K 
output-vaurs  MC  input-condition  K  >=  1 
output - condi t ion 

range (MC)  subset  {1  . .  10}  &  ALTERNATE-MOVE (MC) 
ft  POSSIBLE-MOVE(VISITED-STATES(MC,  <K,  K,  1>) ,  K) 
ft  NO-CANNIBALISM (VISITED-STATES(MC,  <K,  K,  1>) ,  K) 
ft  NO-MOVES-BACK(VISITED-STATES(MC,  <K,  K,  1>)) 
ft  EVERYBODY-MADE-IT(VISITED-STATES(MC,  <K,  K,  1>))) 


Assembling  a  global-search  algorithm 

Choosing  MULTILINEAR-RECURSIVE-WITH-DISJOINT-UNION  as  the  assembling 
scheme  done. 


6.3.1  Context  Independent  Simplification 

The  following  is  an  example  of  a  context-independent  simplification  performed  by  KIDS.  It 
mainly  uses  the  distributive  laws  regarding  the  different  predicates  that  define  the  output 
condition  for  the  base  case  [  ],  where  they  simplify  to  true. 

The  boldface  code  in  the  function  MC-TOP  indicates  the  block  of  code  that  wa^  selected  to 
be  simplified  using  the  context  independent  simplification: 

Stpe  3: Context-Independent-Fast 

expression-to-be-simplified:  if  ##  ft  ##  ft  ##  ft  ##  then  MC-T0P-AUX(##, . . . 


function  MC-TOP 

(var  ##p  attribute  false  VARIABLE?  K:  integer  \  K  >1) 
returns 

(MC-TOP-SET:  set(seq(integer))  \ 

MC-TOP-SET 
=  {MC  I  (MC:  seq(integer)) 
range(MC)  C{1  .,10} 
AALTERNATE-MOVE(MC) 
APOSSIBLE-MOVE 

(VISITED-STATES(MC,  {K,  K,  1)),  K) 
ANO-CANNIBALISM 

(VISITED-STATES(MC,  {K,  K,  1)),  K) 
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ANO-MOVES-BACK(VISITED-STATES(MC,  {K,  K,  1))) 
AEVERYBODY-MADE-IT 

(VISITED-STATES(MC,  {K,  K,  1)))}) 

=  if  NO-CANNIBALISM 

(VISITED-STATES(Q,  (K,  K,  1)),  K) 

APOSSIBLE-MOVE 

(VISITED-STATESCn,  (K,  K,  1)),  K) 
AN0-M0VES-BACK(VISITED-STATES(D,  (K,  K,  1))) 
AALTERNATE-MOVE(D) 
then  MC-TOP-AUX(K,  Q) 
else  -C} 

After  applying  the  context  independent  simplification  to  the  boldface  code  in  the  function 
MC-TOP,  the  resulting  code  looks  like: 


function  MC-TOP 

(var  ##p  attribute  false  VARIABLE?  K:  integer  \  K  >1) 
returns 

(MC-TOP-SET:  set(seq(integer))  \ 

MC-TOP-SET 
=  {MC  I  (MC:  seq(integer)) 
range(MC)  C{1  ..10} 

AALTERNA  TE-MO  VE(MC) 

APOSSIBLE-MOVE 

(VISITED-STATES(MC,  {K,  K,  1)),  K) 
ANO-CANNIBALISM 

(VISITED-STATES(MC,  {K,  K,  1)),  K) 
AN0-M0VES-BACK(VISITED-STATES(MC,  {K,  K,  1))) 
AEVERYBODY-MADE-IT 

(VISITED-STATES(MC,  {K,  K,  1)))}) 

=  if  0  <Kthen  MC-TOP-AUX(K,  [])  else  {} 


6.3.2  Context  Independent  Simplification 

The  following  is  an  example  of  a  context-independent  simplification  performed  by  KIDS.  It 
mainly  uses  the  distributive  laws  regarding  the  different  predicates  that  define  the  output 
condition  for  the  base  case  [  ],  where  they  simplify  to  true. 

The  boldface  code  in  the  function  MC-TOP  indicates  the  block  of  code  that  was  selected  to 
be  simplified  using  the  context  independent  simplification: 


Stpe  3: Context-Independent-Fast 

expression-to-be-simplified:  if  ##&##&##&  ##  then  MC-T0P-AUX(##, . . . 
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function  MC-TOP 

(var  ##p  attribute  false  VARIABLE?  K:  integer  \  K  >1) 
returns 

(MC-TOP-SET:  set(seq(integer))  ( 

MC-TOP-SET 
=  {MC  I  (MC:  seq(integer)) 
range(MC)  C{i  ..10} 

AALTERNATE-MOVE(MC) 

APOSSIBLE-MOVE 

(VISITED-STATES(MC,  {K,  K,  1)),  K) 
ANO-CANNIBALISM 

(VISITED-STATES(MC,  {K,  K,  1)),  K) 
AN0-M0VES-BACK(VISITED-STATES(MC,  {K,  K,  1))) 
AEVERYBODY-MADE-IT 

(VISITED-STATES(MC,  {K,  K,  1))))) 

=  if  NO-CANNIBALISM 

(VISITED-STATES(D,  (K,  K,  1)),  K) 
APOSSIBLE-MOVE 

(VISITED-STATES(n,  (K,  K,  1)),  K) 
AN0-M0VES-BACK(VISITED-STATES(D,  (K,  K,  1))) 
AALTERNATE-MOVE(Q) 
then  MC-TOP-AUX(K,  Q) 
else  {}■ 


After  applying  the  context  independent  simplification  to  the  boldface  code  in  the  function 
MC-TOP,  the  resulting  code  looks  like: 

function  MC-TOP 

(var  attribute  false  VARIABLE?  K:  integer  \  K  >1) 
returns 

(MC-TOP-SET:  set(seq(integer))  \ 

MC-TOP-SET 
=  {MC  1  (MC:  seq(integer)) 
range(MC)  C{1  ..10} 

AALTERNATE-MOVE(MC) 

APOSSIBLE-MOVE 

(VISITED-STATES(MC,  {K,  K,  1)),  K) 

ANO-CANNIBALISM 

(VISITED-STATES(MC,  {K,  K,  1)),  K) 
AN0-M0VES-BACK(VISITED-STATES(MC,  {K,  K,  1))) 
AEVERYBODY-MADE-IT 

(VISITED-STATES(MC,  {K,  K,  1)))}) 

=  ifO  <Kthen  MC-TOP-AUX(K,  [])  else  {} 
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6.4  Context  Dependent  Simplification 

In  the  following  example,  the  boldface  code  in  the  function  MC-TOP-AUX  is  simplified  to  just 
a  single  predicate  EVERYBODY-MADE-IT,  since  the  other  conjuncts  are  true  in  the  context  - 
they  correspond  to  the  filter. 

The  boldface  code  in  the  function  MC-TOP-AUX  indicates  the  block  of  code  that  was  selected 
to  be  simplified  using  the  context  independent  simplification: 


Context-Dependent-Forward-O-Backward-4 

expression-to-be-simplified:  range(##)  subset  {##  ..  ##}  &  ALTERNATE-MOV . . . 


function  MC-TOP-AUX 

(var  attribute  false  VARIABLE?  K:  integer, 
var  ##p  attribute  false  VARIABLE?  V:  seq(integer) 

I 

K  >1  Arange(V)  C{1  ..10} 

AALTERNATE-MOVE(V) 

AN0-M0VES-BACK(VISITED-STATES(V,  {K,  K,  1))) 
AP0SSIBLE-M0VE(VISITED-STATES(V,  {K,  K,  1)),  K) 
ANO-CANNIBALISM 

(VISITED-STATES(V,  (K,  K,  1)),  K)) 

returns 

(MC-TOP-SET:  set(seq(integer))  \ 

MC-TOP-SET 
=  {MC  I  (MC:  seq(integer)) 

EXTENDS(MC,  V) 

AEVERYBODY-MADE-IT 

(VISITED-STATES(MC,  {K,  K,  1))) 
AN0-M0VES-BACK(VISITED-STATES(MC,  {K,  K,  1))) 
ANO-CANNIBALISM 

(VISITED-STATES(MC,  {K,  K,  1)),  K) 
APOSSIBLE-MOVE 

(VISITED-STATES(MC,  {K,  K,  1)),  K) 
AALTERNATE-MOVE(MC) 

Arange(MC)  C{f  ..10}}) 

=  {V\() 

range(V)  C-fl  ,  .lO} 

AALTERNATE-MOVE(V) 

AP0SSIBLE-M0VE(VISITED-STATES(V,  (K,  K,  1)),  K) 
ANO-CANNIBALISM 

(VISITED-STATES(V,  (K,  K,  1)),  K) 


46 


AN0-M0VES-BACK(VISITED-STATES(V,  (K,  K,  1))) 
AEVERYBODY-MADE-IT 

(VISITED-STATES(V,  (K,  K,  1)))} 

U!  reduce  ) 


After  applying  the  context  independent  simplification  to  the  boldface  code  in  function  MC- 
TOP-AUX,  the  resulting  code  looks  like: 


function  MC-TOPAUX 

(var  ##p  attribute  false  VARIABLE?  K:  integer, 

var  ##p  attribute  false  VARIABLE?  V:  seq(integer) 

1 

K  >1  Arange(V)  C{1  ..10} 

AALTERNATE-MOVE(V) 

AN0-M0VES-BACK(VISITED-STATES(V,  {K,  K,  1))) 
AP0SSIBLE-M0VE(VISITED-STATES(V,  {K,  K,  1)),  K) 
ANO-CANNIBALISM 

(VISITED-STATES(V,  {K,  K,  1)),  K)) 

returns 

(MC-TOP-SET:  set(seq(integer))  \ 

MC-TOP-SET 
=  {MC  I  (MC:  seq(integer)) 

EXTENDS(MC,  V) 

AEVERYBODY-MADE-IT 

(VISITED-STATES(MC,  {K,  K,  1))) 
AN0-M0VES-BACK(VISITED-STATES(MC,  {K,  K,  1))) 
ANO-CANNIBALISM 

(VISITED-STATES(MC,  {K,  K,  1)),  K) 
APOSSIBLE-MOVE 

(VISITED-STATES(MC,  {K,  K,  1)),  K) 
AALTERNATE-MOVE(MC) 

Arange(MC)  C{1  ..10}}) 

=  {V\() 

EVERYBODY-MADE-IT(VISITED-STATES(V,  (K,  K,  1)))} 
U! reduce  (...) 


6.5  Finite  Difference  of  VISITED-STATES(V,  <K,K,1>) 

step  10:  Finite  Difference 

expr-to-maintain:  VISITED-STATESCV,  <K,  K,  1>) 
maintained-variable-name:  *VS 
special-purpose?:  false 
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mapping-construct -preference :  ’MAPFORMER 


function  MC-TOP-AUX 

(var  attribute  false  VARIABLE?  K:  integer, 
var  ##p  attribute  false  VARIABLE?  V:  seq(integer) 

I 

K>1  Arange(V)  C{i  ..10} 

AALTERNATE-MOVE(V) 

AN0-M0VES-BACK(VISITED-STATES(V,  {K,  K,  1))) 
AP0SSIBLE-M0VE(VISITED-STATES(V,  {K,  K,  1)),  K) 
ANO-CANNIBALISM 

(VISITED-STATESfV,  {K,  K,  1)),  K)) 

returns 

(MC-TOP-SET:  set(seq(integer))  \ 

MC-TOP-SET 
=  {MC  I  (MC:  seq(integer)) 

EXTENDS(MC,  V) 

AEVERYBODY-MADE-IT 

(VISITED-STATES(MC,  {K,  K,  1))) 
AN0-M0VES-BACK(VISITED-STATES(MC,  {K,  K,  1))) 
ANO-CANNIBALISM 

(VISITED-STATES(MC,  {K,  K,  1)),  K) 
APOSSIBLE-MOVE 

(VISITED-STATES(MC,  {K,  K,  1)),  K) 
AALTERNATE-MOVE(MC) 

Arange(MC)  C{1  ..10}}) 

=  {V\() 

EVERYBODY-MADE-IT(VISITED-STATES(V,  {K,  K,  1)))} 

U!  reduce 

(UNION!, 

{MC-TOP-AUX (K,  append(V,  I))  |  (I:  integer) 
NO-CANNIBALISM 
(ALL-BUT-IST-  VISITED-STATES 

([I],  /asffVlSITED-STATES(V,  (K,  K,  1));;, 

K) 

APOSSIBLE-MOVE 

(ALL-BUT-IST-VISITED-STATES 

([IJ. 

last(VISITED-STATES(V,  {K,  K,  1)))), 

K) 

A  CROSS-NO-MOVES-BACK 

(VISITED-STATES(V,  {K,  K,  1)), 
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ALL-BUT-IST-  VISITED-STATES 

m 

last(VISITED-STATES(V,  {K,  K,  1))))) 
ANO-MOVES-BACK 

(ALL-B  UT-IST-  VISITED-STA  TES 

m 

last(VISITED-STATES(V,  {K,  K,  1))))). 
ASHIFT-ALTERNATE-MOVE([I],  size(V)) 

Ale{l  ..10}}) 

After  the  finite  difference  operation  of  VISITED-STATES (V,  <K,K,1>)  into  the  variable  VS, 
the  new  code  produced  by  KIDS: 

function  MC-TOP-AUX 

(var  ##p  attribute  false  VARIABLE?  K:  integer, 
var  ##p  attribute  false  VARIABLE?  V:  seq(integer), 
var  ##p  attribute  false  VARIABLE?  VS 
:  seq(tuple (integer,  integer,  integer)) 

I 

SEQEQUAL(VS,  VISITED-STATES (V,  (K,  K,  1))) 

ANO-CANNIBALISM 

(VISITED-STATESfV,  {K,  K,  1)),  K) 
AP0SSIBLE-M0VE(VISITED-STATES(V,  {K,  K,  1)),  K) 
ANO-MOVES-BACK(VISITED-STATES(V,  {K,  K,  1))) 
AALTERNATE-MOVE(V) 

Arange(V)  Q{1  .  .10}AK  >1) 

returns 

(MC-TOP-SET:  set(seq(integer))  | 

MC-TOP-SET 
=  {MC  I  (MC:  seq(integer)) 

EXTENDS(MC,  V) 

AEVERYBODY-MADE-IT 

(VISITED-STATES(MC,  {K,  K,  1))) 
AN0-M0VES-BACK(VISITED-STATES(MC,  {K,  K,  1))) 
ANO-CANNIBALISM 

(VISITED-STATES(MC,  {K,  K,  1)),  K) 

APOSSIBLE-MOVE 

(VISITED-STATES (MC,  {K,  K,  1)),  K) 
AALTERNATE-MOVE(MC) 

Arange(MC)  C{1  ..10}}) 

=  {V\()  EVERYBODY-MADE-IT(VS)} 

U!  reduce 

(UNION!, 

{MC-TOP-AUX 

(K,  append(V,  I), 


49 


vs  -H-ALL-BUT-IST-VISITED-STATES 
(m,  last(VS)); 

I  (I:  integer) 

NO-CANNIBALISM 

(ALL-BUT-1ST-VISITED-STATES([I],  last(VS)),  K) 
APOSSIBLE-MOVE 

(ALL-BUT-1ST-VISITED-STATES([I],  last(VS)),  K) 

A  CROSS-NO-MOVES-BACK 

^S,  ALL-BUT-1ST-VISITED-STATES([I],  last  (VS))) 
ANO-MOVES-BACK 

(ALL-BUT-1ST-VISITED-STATES([I],  last(VS))) 
ASHIFT-ALTERNATE-M0VE([I],  size(V)) 

Aie{i  ..10}}) 


function  MC-TOP 

(var  attribute  false  VARIABLE?  K:  integer  \  1  ^K) 
returns 

(MC-TOP-SET:  set(seq(integer))  \ 

MC-TOP-SET 
=  {MC  I  (MC:  seq(integer)) 
range(MC)  C{1  ..10} 

AALTERNATE-MOVE(MG) 

APOSSIBLE-MOVE 

(VISITED-STATES(MC,  {K,  K,  1)),  K) 
ANO-CANNIBALISM 

(VISITED-STATES(MC,  {K,  K,  1)),  K) 
AN0-M0VES-BACK(VISITED-STATES(MC,  {K,  K,  1))) 
AEVERYBODY-MADE-IT 

(VISITED-STATES(MC,  {K,  K,  1)))}) 

=  MC-TOP-AUX(K,  [],  [(K,  K,  1)]; 


6.6  Final  Version  of  the  Program  for  the  MC  problem  Derived 
with  KIDS 

step  28:  Refine 

f oci~to-compile :  {function  MC-TOP  (##  I  ##  ##)  returns (MC-TOP-SET :  ##  .. 

,  function  MC-TOP-GS-AUX-1  (...  I  ##)  returns (##  I  ##)  = 

} 


function  MC-TOP-GS-AUX-1 


(var  ##p  attribute  false  VARIABLE?  K:  integer, 
var  ##p  attribute  false  VARIABLE?  V:  seq(integer), 
var  ##p  attribute  false  VARIABLE?  VS 
:  seq(tuple(integer,  integer,  integer)), 
var  ##p  attribute  false  VARIABLE?  V-SIZE:  integer, 
var  attribute  false  VARIABLE?  CURRENT-MOVE 

;  tuple(integer,  integer,  integer) 

*  CURRENT-MOVE  =  last  (VS) 

ASEQEQUAL(VS,  VISITED-STATES(V,  (K,  K,  1))) 
ANO-CANNIBALISM 

(VISITED-STATES(V,  (K,  K,  1)),  K) 
AP0SSIBLE-M0VE(VISITED-STATES(V,  (K,  K,  1)),  K) 
AN0-M0VES-BACK(VISITED-STATES(V,  (K,  K,  1))) 
AALTERNATE-MOVE(V) 

Arange(V)  C-Cl  .  .10} AK  >1 
AV-SIZE  =  size(V)) 

returns 

(MC-TOP-SET:  set(seq(integer))  | 

MC-TOP-SET 

=  {MC  I  (MC:  seq(integer)) 

EXTENDS(MC,  V) 

AEVERYBODY-MADE-IT 

(VISITED-STATES(MC,  (K,  K,  1))) 
AN0-M0VES-BACK(VISITED-STATES(MC,  (K,  K,  1))) 
ANO-CANNIBALISM 

(VISITED-STATES(MC,  (K,  K,  1)),  K) 
APOSSIBLE-MOVE 

(VISITED-STATES(MC,  (K,  K,  1)),  K) 
AALTERNATE-MOVE(MC) 

Arange(MC)  C-Cl  .  .lO}}) 

=  {V  1  0  CURRENT-MOVE  =  (0,  0,  -1)} 

Ulreduce 

(UNION!, 

{MC-TOP-GS-AUX-l 

(K,  append(V,  I), 

VS  ++[( 

CURRENT-MOVE.  1  -1-  MAPCL-I, 
CURRENT-MOVE.2  +  MAPML-I, 
CURRENT-MOVE.3  ♦-!)], 

1  +  V-SIZE, 

(CURRENT-MOVE.l  +  MAPCL-I, 

CURRENT-MOVE.2  +  MAPML-I, 
CURRENT-MOVE.3  ♦-!)) 
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(MAPML-I:  integer,  MAPCL-I:  integer, 
CURRENT-STATE:  seq(tuple(integer,  integer,  integer)), 
I:  integer) 

MAPML-I  =  MAPML(I) 

A 

CURRENT-STATE 

=  [( 

CURRENT-MOVE.l  +  MAPCL-I, 
CURRENT-MOVE.2  -|-  MAPML-I, 
CURRENT-MOVE.3  ♦-!)] 

AI  €-Cl  ..10} 

A((l  -I-  V-SIZE)  mod  2  ^0  Al  <6 

V(1  +  V-SIZE)  mod  2  =  0  A5  <I) 
ANO-MOVES-BACK(CURRENT-STATE) 
ACROSS-NO-MOVES-BACK(VS,  CURRENT-STATE) 
APOSSIBLE-MOVE(CURRENT-STATE,  K) 
ANO-CANNIBALISM(CURRENT-STATE,  K) 
AMAPCL-I  =  MAPCL(I)}) 


function  MC-TOP 

(var  ##p  attribute  false  VARIABLE?  K:  integer  |  1  <K) 
returns 

(MC-TOP-SET:  set(seq(integer))  | 

MC-TOP-SET 
=  {MC  I  (MC:  seq(integer)) 
range(MC)  C{l  ..10} 

AALTERNATE-MOVE(MC) 

APOSSIBLE-MOVE 

(VISITED-STATES(MC,  (K,  K,  1)),  K) 
ANO-CANNIBALISM 

(VISITED-STATES(MC,  (K,  K,  1)),  K) 
ANO-MOVES-BACK(VISITED-STATES(MC,  (K,  K,  1))) 
AEVERYBODY-MADE-IT 

(VISITED-STATES(MC,  (K,  K,  1)))}) 

=  MC-TOP-GS-AUX-1 
(K,  D,  [(K,  K,  1>],  0, 

(K,  K,  1)) 
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function  MC-TOP-GS-AUX-1 

(var  attribute  false  VARIABLE?  K:  integer, 

var  attribute  false  VARIABLE?  V:  seq(integer), 

var  ##p  attribute  false  VARIABLE?  VS 
:  seq(tuple (integer,  integer,  integer)), 
var  ##p  attribute  false  VARIABLE?  V-SIZE:  integer, 
var  ##p  attribute  false  VARIABLE?  CURRENT-MOVE 
;  tuple  (integer,  integer,  integer) 

1 

CURRENT-MOVE  =  last  (VS) 

ASEQEQUAL(VS,  VISITED-STATES(V,  (K,  K,  1))) 
ANO-CANNffiALISM 

(VISITED-STATES(V,  (K,  K,  1)),  K) 
APOSSIBLE-MOVE(VISITED-STATES(V,  (K,  K,  1)),  K) 
ANO-MOVES-BACK(VISITED-STATES(V,  (K,  K,  1))) 
AALTERNATE-MOVE(V) 

Arange(V)  C-fl  ,  .IOJaK  >1 
AV-SIZE  =  size(V)) 

returns 

(MC-TOP-SET;  set(seq(integer))  | 

MC-TOP-SET 
=  {MC  I  (MC:  seq(integer)) 

EXTENDS (MC,  V) 

AEVERYBODY-MADE-IT 

(VISITED-STATES(MC,  (K,  K,  1))) 
ANO-MOVES-BACK(VISITED-STATES(MC,  (K,  K,  1))) 
ANO-CANNIBALISM 

(VISITED-STATES(MC,  (K,  K,  1)),  K) 
APOSSIBLE-MOVE 

(VISITED-STATES(MC,  (K,  K,  1)),  K) 
AALTERNATE-MOVE(MC) 

Arange(MC)  C{l  ..lO}}) 

=  -CV  I  0  CURRENT-MOVE  =  (0,  0,  -1)} 

Ulreduce 

(UNION!, 

•CMC-TOP-GS-AUX-1 

(K,  append(V,  I), 

VS  ++[( 

CURRENT-MOVE.l  +  MAPCL-I, 
CURRENT-MOVE.2  -|-  MAPML-I, 
CURRENT-MOVE.3  ♦-!)], 

1  +  V-SIZE, 

(CURRENT-MOVE.l  +  MAPCL-I, 

CURRENT-MOVE.2  -1-  MAPML-I, 
CURRENT-MOVE.3  ♦-!)) 
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(MAPML-I:  integer,  MAPCL-I:  integer, 
CURRENT-STATE:  seq(tuple(integer,  integer,  integer)), 
I:  integer) 

MAPML-I  =  MAPML(I) 

A 

CURRENT-STATE 

=  [( 

CURRENT-MOVE.  1  -f  MAPCL-I, 
CURRENT-MOVE.2  -|-  MAPML-I, 
CURRENT-MOVE.3  ♦-!)] 

AI  €{l  ..10> 

A((l  +  V-SIZE)  mod  2  ^0  Al  <6 

V(1  +  V-SIZE)  mod  2  =  0  A5  <I) 
ANO-MOVES-BACK  (CURRENT-STATE) 
ACR0SS-N0-M0VES-BACK(VS,  CURRENT-STATE) 
AP0SSIBLE-M0VE(CURRENT-STATE,  K) 

ano-cannibalism(current-state,  K) 
AMAPCL-I  =  MAPCL(I)}) 


function  MC-TOP 

(var  attribute  false  VARIABLE?  K:  integer  |  1  <K) 

returns 

(MC-TOP-SET:  set(seq(integer))  | 

MC-TOP-SET 

=  {MC  I  (MC:  seq(integer)) 
range(MC)  C{l  .  .10> 

AALTERNATE-MOVE(MC) 

APOSSIBLE-MOVE 

(VISITED-STATES(MC,  (K,  K,  1)),  K) 
ANO-CANNIBALISM 

(VISITED-STATES(MC,  (K,  K,  1)),  K) 
AN0-M0VES-BACK(VISITED-STATES(MC,  (K,  K,  1))) 

aeverybody-made-it 

(VISITED-STATES(MC,  (K,  K,  1)))}) 

=  MC-TOP-GS-AUX-1 
(K,  D,  [(K,  K,  1)],  0, 

(K,  K,  1)) 
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MISSION 

OF 

ROME  LABORATORY 


Mission.  The  mission  of  Rome  Laboratory  is  to  advance  the  science  and 
technologies  of  command,  control,  communications  and  intelligence  and  to 
transition  them  into  systems  to  meet  customer  needs.  To  achieve  this, 
Rome  Lab: 


a.  Conducts  vigorous  research,  development  and  test  programs  in  all 
applicable  technologies; 

b.  Transitions  technology  to  current  and  future  systems  to  improve 
operational  capability,  readiness,  and  supportabiiity; 

c.  Provides  a  full  range  of  technical  support  to  Air  Force  Materiel 
Command  product  centers  and  other  Air  Force  organizations; 

d.  Promotes  transfer  of  technology  to  the  private  sector; 

e.  Maintains  leading  edge  technological  expertise  in  the  areas  of 
surveillance,  communications,  command  and  control,  intelligence,  reliability 
science,  electro-magnetic  technology,  photonics,  signal  processing,  and 
computational  science. 


The  thrust  areas  of  technical  competence  include;  Surveillance, 
Communications,  Command  and  Control,  Intelligence,  Signal  Processing, 
Computer  Science  and  Technology,  Bectromagnetic  Technology, 
Photonics  and  Reliability  Sciences. 


